[Pacemaker] pacemaker monitoring user permision denied

[Andrew Beekhof]

On 23/04/2013, at 1:45 AM, Wolfgang Routschka <wolfgang.routschka at drumedar.de> wrote:

> Hi everbody,
>  
> I want to monitor our pacemaker/cman cluster on scientific linux 6.4 RHEL clone with nagios .
>  
> After reading documentation http://clusterlabs.org/doc/acls.html and configuration my nagios user isn´t able to start crm_mon
>  
> "Attempting connection to the cluster...Could not establish cib_ro connection: Permission denied (13)"
>  
> User is in haclient group
>  
> [nagios at xx ~]$ id
> uid=510(nagios) gid=310(nagios) Gruppen=310(nagios),498(haclient)

This is a known issue that has been fixed in 1.1.10-rc1

>  
> I used Pacemaker 1.1.8-7.el6.x86_64
>  
> My CIB schema is configured for pacemaker-1.2
>  
> <cib epoch="259" num_updates="31" admin_epoch="0" validate-with="pacemaker-1.2"
>  
> enable acl is configured
>  
> crm configure show
>  
> property $id="cib-bootstrap-options" \
>       dc-version="1.1.8-7.el6-394e906" \
>       cluster-infrastructure="cman" \
>         no-quorum-policy="ignore" \
>         stonith-enabled="false" \
>         enable-acl="true"
>  
> Greetings
>  
> _______________________________________________
> Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> 
> Project Home: http://www.clusterlabs.org
> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org