Hi,

On Fri, Feb 22, 2008 at 10:39:29AM -0500, Doug Lochart wrote:
> After hacking up the  /usr/lib64/stonith/plugins/external/ipmi script
> I have discovered what is the problem.  In the script the IPMITOOL
> shell variable is being set by `which ipmitool 2>/dev/null` command.
> This returns the proper location when run by a regular user or by
> root.  However I just checked and saw that heartbeat is running as
> user nobody.

There are many processes and some of them do run as nobody most
of the time. They all have ability to resume the original (root)
user id. At least in this case, the stonithd should run a stonith
plugin (ipmi) as root.

> I installed heartbeat from an RPM so I do no other
> configuration for it because usually all the user accounts are added
> for you in an RPM.  Is heartbeat supposed to run as user nobody?  If
> so am I right in my assumption that the 'which' command is not
> returning the path to the ipmitool _because_ it is being run by
> nobody?

Don't think so, but you can try it yourself by inserting sth like:

id > /tmp/ipmi-$$.id

in the ipmi script. To fully debug you can also try:

set -x
exec 2>/tmp/ipmi-$$.debug

BTW, I just checked some old ha.cf of mine and they all have sth
similar to what you used. It must be that the problem is within
the script.

Thanks,

Dejan

> I can hardcode the variable in my script but I would rather get it
> working the way it is supposed to work.  This little issue may
> foreshadow other more major ones if I don't get it straight now.
> 
> thanks,
> 
> regards
> 
> Doug
> 
> 
> On Fri, Feb 22, 2008 at 10:02 AM, Doug Lochart <[EMAIL PROTECTED]> wrote:
> > I tried Dejan's suggestion but I received the same result.  Chun have
> >  you had the cluster working and stonith _not_ complaining for a few
> >  days and _then_ it started to complain about the 256 code?  Or maybe
> >  you are just now seeing that stonith is giving this message?
> >
> >  I believe the problem may be how stonith is interpreting the ipmi
> >  scripts return value.
> >
> >  One thing I have seen in my googling is that there are not many
> >  examples of people using stonith and ipmi at least not in the non crm
> >  (version 1) way.  Can anyone reading this post acknowledge that they
> >  are using it and offer any suggestions.
> >
> >  In case it matters (because it might) I am running on CentOS 5.1
> >  (fully patched as of last week) on x86_64 system.
> >
> >  thanks and regards,
> >
> >  Doug
> >
> >
> >
> >  On Fri, Feb 22, 2008 at 8:47 AM, Chun Tian (binghe)
> >  <[EMAIL PROTECTED]> wrote:
> >  > Hi, there
> >  >
> >  >
> >  >  > I have tested stonith from the command line and was able to reset the
> >  >  > target PC.  On the command I used the following:
> >  >  >
> >  >  > stonith  -t external/ipmi -T reset -p "capestor2 10.43.120.134 ADMIN
> >  >  > mypassword" capestor2
> >  >  >
> >  >  > This worked marvelously!  So then I move the stuff into the ha.cf.
> >  >  > Not having much in the way of examples for ipmi this was my best guess
> >  >  >
> >  >  > stonith_host capestor1 external/ipmi capestor2 10.43.120.134 ADMIN
> >  >  > mypassword
> >  >  >
> >  >  > Syslog gives me this:
> >  >  > Feb 21 17:20:24 capestor2 heartbeat: [4133]: info: Checking status of
> >  >  > STONITH device [IPMI STONITH device ]
> >  >  > Feb 21 17:20:24 capestor2 heartbeat: [4133]: info: glib:
> >  >  > external_run_cmd: Calling '/usr/lib64/stonith/plugins/external/ipmi
> >  >  > status' returned 256
> >  >
> >  >  I met this too.
> >  >
> >  >  I guess this calling actually return 0 but SOMETIMES stonith/external
> >  >  thought the return value is 256...
> >  >
> >  >  I have a running Heartbeat 4-node cluster with stonith enabled, a few
> >  >  days ago, I got a return value 256 when 'ipmi status' be calling.
> >  >
> >  >
> >  >  >
> >  >  > Feb 21 17:20:24 capestor2 heartbeat: [4133]: ERROR: STONITH device
> >  >  > IPMI STONITH device  not operational!
> >  >  > Feb 21 17:20:24 capestor2 heartbeat: [4111]: WARN: Managed
> >  >  > STONITH-stat process 4133 exited with return code 1.
> >  >  > Feb 21 17:20:24 capestor2 heartbeat: [4111]: ERROR: STONITH status
> >  >  > operation failed.
> >  >  > Feb 21 17:20:24 capestor2 heartbeat: [4111]: info: This may mean that
> >  >  > the STONITH device has failed!
> >  >  >
> >  >  > I even went so far as to copy the ipmi plugin to test-ipmi and
> >  >  > hardcoded the values for the variables that are passed in my
> >  >  > heartbeat.  That worked.
> >  >  >
> >  >  > Any ideas as to what I may be doing wrong?
> >  >  >
> >  >  > thanks
> >  >  >
> >  >  > Doug
> >  >  >
> >  >  >
> >  >  >
> >  >  >
> >  >  > --
> >  >  > What profits a man if he gains the whole world yet loses his soul?
> >  >
> >  >
> >  > > _______________________________________________
> >  >  > Linux-HA mailing list
> >  >  > [email protected]
> >  >  > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> >  >  > See also: http://linux-ha.org/ReportingProblems
> >  >
> >  >  _______________________________________________
> >  >  Linux-HA mailing list
> >  >  [email protected]
> >  >  http://lists.linux-ha.org/mailman/listinfo/linux-ha
> >  >  See also: http://linux-ha.org/ReportingProblems
> >  >
> >
> >
> >
> >  --
> >  What profits a man if he gains the whole world yet loses his soul?
> >
> 
> 
> 
> -- 
> What profits a man if he gains the whole world yet loses his soul?
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to