Looks like the CRAMMD5 mechanism is not available on your hosts. What SASL packages did you install?
On Fri, May 8, 2015 at 9:55 AM, John Webb <[email protected]> wrote: > > Sorry - It looks like what I copied and paste the service status I missed > the end of the lines. It has been updated below now. > > > --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Looking for some direction on what I'm doing wrong with getting Mesos > slave authentication working. I'm getting "Failed to authenticate slave(1)@ > 192.168.33.10:5051: Failed to get list of mechanisms: SASL(-4): no > mechanism available: Internal Error -4 in server.c near line 1757" after > start mesos-slave on the same host. Here are my current settings: > > /etc/mesos-mater files > ------------------------------ > authenticate = true > authenticate_slaves = true > authenticators = crammd5 > credentials = /etc/mesos/mesos-config/mesos-master.passwd > > mesos-master status output > ------------------------------------- > mesos-master.service - Mesos Master > Loaded: loaded (/usr/lib/systemd/system/mesos-master.service; enabled) > Active: active (running) since Fri 2015-05-08 15:14:08 UTC; 29min ago > Main PID: 6548 (mesos-master) > CGroup: /system.slice/mesos-master.service > ├─6548 /usr/sbin/mesos-master --zk=zk://localhost:2181/mesos > --port=5050 --log_dir=/var/log/mesos --authenticate=true > --authenticate_slaves=true --au > thenticators=crammd5 > --credentials=/etc/mesos/mesos-config/mesos-master.passwd --quorum=1 > --work_dir=/var/lib/mesos > ├─6566 logger -p user.info -t mesos-master[6548] > └─6567 logger -p user.err -t mesos-master[6548] > May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.708873 6569 > master.cpp:3829] Using default CRAM-MD5 authenticator > May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.709044 6569 > authenticator.hpp:170] Creating new server SASL connection > May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.709228 6569 > authenticator.hpp:213] Failed to get list of mechanisms: no mechanism > available > May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.709421 6569 > master.cpp:3871] Failed to authenticate slave(1)@192.168.33.10:5051: > Failed to get list of > mechanisms: SASL(-4): no mechanism available: Internal Error -4 in > server.c near line 1757 > May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.710419 6569 > master.cpp:3818] Authenticating slave(1)@192.168.33.10:5051 > May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.710582 6569 > master.cpp:3829] Using default CRAM-MD5 authenticator > May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.710753 6569 > authenticator.hpp:170] Creating new server SASL connection > May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.711504 6569 > authenticator.hpp:213] Failed to get list of mechanisms: no mechanism > available > May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.711690 6569 > master.cpp:3871] Failed to authenticate slave(1)@192.168.33.10:5051: > Failed to get list of > mechanisms: SASL(-4): no mechanism available: Internal Error -4 in > server.c near line 1757 > May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.712805 6569 > master.cpp:3818] Authenticating slave(1)@192.168.33.10:5051 > > /etc/mesos-slave files > ----------------------------- > authenticate = crammd5 > credential = /etc/mesos/mesos-config/mesos-slave.passwd > > mesos-slave status output > ----------------------------------- > mesos-slave.service - Mesos Slave > Loaded: loaded (/usr/lib/systemd/system/mesos-slave.service; enabled) > Active: active (running) since Fri 2015-05-08 15:41:47 UTC; 6s ago > Main PID: 6714 (mesos-slave) > CGroup: /system.slice/mesos-slave.service > ├─6714 /usr/sbin/mesos-slave --master=zk://localhost:2181/mesos > --log_dir=/var/log/mesos --authenticatee=crammd5 > --containerizers=docker,mesos --cred > ential=/etc/mesos/mesos-config/mesos-slave.passwd > ├─6726 logger -p user.info -t mesos-slave[6714] > └─6727 logger -p user.err -t mesos-slave[6714] > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.762605 6733 > authenticatee.hpp:139] Creating new client SASL connection > May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.763337 6734 > slave.cpp:762] Failed to authenticate with master > [email protected]:5050: Authentication > error: Failed to get list of mechanisms: SASL(-4): no mechanism > available: Internal Error -4 in server.c near line 1757 > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.763459 6734 > slave.cpp:710] Authenticating with master [email protected]:5050 > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.763620 6734 > slave.cpp:715] Using default CRAM-MD5 authenticatee > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.763788 6734 > authenticatee.hpp:139] Creating new client SASL connection > May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.765085 6735 > slave.cpp:762] Failed to authenticate with master > [email protected]:5050: Authentication > error: Failed to get list of mechanisms: SASL(-4): no mechanism > available: Internal Error -4 in server.c near line 1757 > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.765274 6735 > slave.cpp:710] Authenticating with master [email protected]:5050 > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.765455 6735 > slave.cpp:715] Using default CRAM-MD5 authenticatee > May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.765751 6735 > authenticatee.hpp:139] Creating new client SASL connection > May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.766502 6729 > slave.cpp:762] Failed to authenticate with master > [email protected]:5050: Authentication > error: Failed to get list of mechanisms: SASL(-4): no mechanism > available: Internal Error -4 in server.c near line 1757 > > > I'm using principal <whitespace> secret in the mesos-master.passwd and > mesos-slave.passwd with no new line after the credentials (aka: echo -n ). > > - John >
