Hi, On Wed, Sep 02, 2015 at 03:44:47PM -0300, Carlos Xavier wrote: > Hi Kristoffer. > > Tank you very much for fast reply. > > I did a cleanup of the resource and took a look at the log and could see that > the issue has something to do with the RA IPaddr2 trying to set some iptables > rule, although we are not using any iptables rule set. > > crm(live)resource# cleanup c-ip-httpd > Cleaning up ip_ccardbusiness:0 on apolo > Cleaning up ip_ccardbusiness:0 on diana > Cleaning up ip_ccardgift:0 on apolo > Cleaning up ip_ccardgift:0 on diana > Cleaning up ip_intranet:0 on apolo > Cleaning up ip_intranet:0 on diana > Cleaning up ip_ccardbusiness:1 on apolo > Cleaning up ip_ccardbusiness:1 on diana > Cleaning up ip_ccardgift:1 on apolo > Cleaning up ip_ccardgift:1 on diana > Cleaning up ip_intranet:1 on apolo > Cleaning up ip_intranet:1 on diana > Waiting for 12 replies from the CRMd............ OK > > And on the log we have > [...] > 2015-09-02T14:40:54.184995-03:00 apolo IPaddr2(ip_ccardbusiness)[8360]: > ERROR: iptables failed > 2015-09-02T14:40:54.187651-03:00 apolo lrmd[5182]: notice: > operation_finished: ip_ccardbusiness_start_0:8360:stderr [ iptables: No > chain/target/match by that name. ]
The target used is CLUSTERIP. Do you have the iptables extensions installed (you should)? The package is called xtables-plugins. It should contain a library with CLUSTERIP support. [...] > Is there a way to stop the IPaddr2 RA to try to manage the iptables rule? No, there isn't. Not a specialist on this, but so far nobody complained about iptables use. The underlying problem should be solved. Since you're running a SLE product, you can also ask for help from the SUSE support. Thanks, Dejan _______________________________________________ Users mailing list: [email protected] http://clusterlabs.org/mailman/listinfo/users Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org
