Hey John,

looks as if your SASL (CyrusSASL) installation was incomplete or defective as 
it fails identifying mechanisms usable for authentication:

> May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.763337  6734 
> slave.cpp:762] Failed to authenticate with master [email protected]:5050 
> <mailto:[email protected]:5050>: Authentication
>  error: Failed to get list of mechanisms: SASL(-4): no mechanism available: 
> Internal Error -4 in server.c near line 1757


Did you build mesos out of the current git master version?

How did you install CyrusSASL, which SASL authentication plugins did you 
install? A common place to look at would be "/usr/lib/sasl2” - that folder 
would show the installed plugins. Mind that the exact location depends on your 
distribution or build configuration in case you installed things manually.

Till


> On May 8, 2015, at 9:55 AM, John Webb <[email protected]> wrote:
> 
> 
> Sorry - It looks like what I copied and paste the service status I missed the 
> end of the lines. It has been updated below now.
>  
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> 
> Looking for some direction on what I'm doing wrong with getting Mesos slave 
> authentication working. I'm getting "Failed to authenticate 
> slave(1)@192.168.33.10:5051: Failed to get list of mechanisms: SASL(-4): no 
> mechanism available: Internal Error -4 in server.c near line 1757" after 
> start mesos-slave on the same host. Here are my current settings:
>  
> /etc/mesos-mater files
> ------------------------------
> authenticate = true
> authenticate_slaves = true
> authenticators = crammd5
> credentials = /etc/mesos/mesos-config/mesos-master.passwd
>  
> mesos-master status output
> -------------------------------------
> mesos-master.service - Mesos Master
>    Loaded: loaded (/usr/lib/systemd/system/mesos-master.service; enabled)
>    Active: active (running) since Fri 2015-05-08 15:14:08 UTC; 29min ago
>  Main PID: 6548 (mesos-master)
>    CGroup: /system.slice/mesos-master.service
>            ├─6548 /usr/sbin/mesos-master --zk=zk://localhost:2181/mesos 
> <zk://localhost:2181/mesos> --port=5050 --log_dir=/var/log/mesos 
> --authenticate=true --authenticate_slaves=true --au
> thenticators=crammd5 
> --credentials=/etc/mesos/mesos-config/mesos-master.passwd --quorum=1 
> --work_dir=/var/lib/mesos
>            ├─6566 logger -p user.info -t mesos-master[6548]
>            └─6567 logger -p user.err -t mesos-master[6548]
> May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.708873  6569 
> master.cpp:3829] Using default CRAM-MD5 authenticator
> May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.709044  6569 
> authenticator.hpp:170] Creating new server SASL connection
> May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.709228  6569 
> authenticator.hpp:213] Failed to get list of mechanisms: no mechanism 
> available
> May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.709421  6569 
> master.cpp:3871] Failed to authenticate slave(1)@192.168.33.10:5051: Failed 
> to get list of
>  mechanisms: SASL(-4): no mechanism available: Internal Error -4 in server.c 
> near line 1757
> May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.710419  6569 
> master.cpp:3818] Authenticating slave(1)@192.168.33.10:5051
> May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.710582  6569 
> master.cpp:3829] Using default CRAM-MD5 authenticator
> May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.710753  6569 
> authenticator.hpp:170] Creating new server SASL connection
> May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.711504  6569 
> authenticator.hpp:213] Failed to get list of mechanisms: no mechanism 
> available
> May 08 15:41:47 node1 mesos-master[6567]: W0508 15:41:47.711690  6569 
> master.cpp:3871] Failed to authenticate slave(1)@192.168.33.10:5051: Failed 
> to get list of
>  mechanisms: SASL(-4): no mechanism available: Internal Error -4 in server.c 
> near line 1757
> May 08 15:41:47 node1 mesos-master[6567]: I0508 15:41:47.712805  6569 
> master.cpp:3818] Authenticating slave(1)@192.168.33.10:5051
> 
> /etc/mesos-slave files
> -----------------------------
> authenticate = crammd5
> credential = /etc/mesos/mesos-config/mesos-slave.passwd
>  
> mesos-slave status output
> -----------------------------------
> mesos-slave.service - Mesos Slave
>    Loaded: loaded (/usr/lib/systemd/system/mesos-slave.service; enabled)
>    Active: active (running) since Fri 2015-05-08 15:41:47 UTC; 6s ago
>  Main PID: 6714 (mesos-slave)
>    CGroup: /system.slice/mesos-slave.service
>            ├─6714 /usr/sbin/mesos-slave --master=zk://localhost:2181/mesos 
> <zk://localhost:2181/mesos> --log_dir=/var/log/mesos --authenticatee=crammd5 
> --containerizers=docker,mesos --cred
> ential=/etc/mesos/mesos-config/mesos-slave.passwd
>            ├─6726 logger -p user.info -t mesos-slave[6714]
>            └─6727 logger -p user.err -t mesos-slave[6714]
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.762605  6733 
> authenticatee.hpp:139] Creating new client SASL connection
> May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.763337  6734 
> slave.cpp:762] Failed to authenticate with master [email protected]:5050 
> <mailto:[email protected]:5050>: Authentication
>  error: Failed to get list of mechanisms: SASL(-4): no mechanism available: 
> Internal Error -4 in server.c near line 1757
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.763459  6734 
> slave.cpp:710] Authenticating with master [email protected]:5050 
> <mailto:[email protected]:5050>
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.763620  6734 
> slave.cpp:715] Using default CRAM-MD5 authenticatee
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.763788  6734 
> authenticatee.hpp:139] Creating new client SASL connection
> May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.765085  6735 
> slave.cpp:762] Failed to authenticate with master [email protected]:5050 
> <mailto:[email protected]:5050>: Authentication
>  error: Failed to get list of mechanisms: SASL(-4): no mechanism available: 
> Internal Error -4 in server.c near line 1757
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.765274  6735 
> slave.cpp:710] Authenticating with master [email protected]:5050 
> <mailto:[email protected]:5050>
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.765455  6735 
> slave.cpp:715] Using default CRAM-MD5 authenticatee
> May 08 15:41:47 node1 mesos-slave[6727]: I0508 15:41:47.765751  6735 
> authenticatee.hpp:139] Creating new client SASL connection
> May 08 15:41:47 node1 mesos-slave[6727]: W0508 15:41:47.766502  6729 
> slave.cpp:762] Failed to authenticate with master [email protected]:5050 
> <mailto:[email protected]:5050>: Authentication
>  error: Failed to get list of mechanisms: SASL(-4): no mechanism available: 
> Internal Error -4 in server.c near line 1757
>  
>  
> I'm using principal <whitespace> secret in the mesos-master.passwd and 
> mesos-slave.passwd with no new line after the credentials (aka: echo -n ).
>  
> - John

Reply via email to