[Pacemaker] Cluster tools &

[Andrew Beekhof]

On Thu, Mar 14, 2013 at 10:18 AM, Andrew Beekhof <andrew at beekhof.net> wrote:
> On Wed, Mar 13, 2013 at 8:55 PM, matonb <matonb at ltresources.co.uk> wrote:
>> Andrew Beekhof <andrew at ...> writes:
>>
>>>
>>> On Wed, Mar 13, 2013 at 5:55 PM, matonb <matonb at ...> wrote:
>>> > Andrew Beekhof <andrew at ...> writes:
>>> >
>>> >>
>>> >> On Wed, Mar 13, 2013 at 3:59 AM, matonb <matonb at ...> wrote:
>>> >> > Hi List,
>>> >> >
>>> >> >   I've just upgraded a CentOS 6.3 server to 6.4, other  than the
>>> > disappearance
>>> >> >   of the crm shell tools, one thing I've noticed which is a minor
>> annoyance
>>> >> >   rather than a problem is that users which are members of the haclient
>>> > group
>>> >> >   can't use the crm tools any more:
>>> >
>>> > The 6.3 RPMS came from the CentOS base repository, any user that was a
>> member
>>> > of the haclient group could execute and connect to the cluster using
>> commands
>>> > such as crm_mon (the most frequently used).
>>>
>>> Ah, thats not the ACLs Lars was talking about.
>>> What you're talking about should still work, nothing should have
>>> changed in that area between 6.3 and 6.4.
>>> I will investigate.
>>
>>   Thanks :-)
>
> Ah.  Hmmm, well this is embarrassing.
> 6.4 uses a different IPC system than 6.3 and in the conversion we
> unintentionally lost the ability to do what you're attempting.
> It seems you're the first person to notice in the year since we
> switched upstream :-(
>
> I'm going to set about fixing this now but I'm not yet sure if I'll be
> able to get the fix into 6.4.
> In the meantime, adding people to the root group (yes, I'm aware how
> horrible that is) would return the capability in some form.

I believe this should make everyone happy:
   https://github.com/beekhof/pacemaker/commit/3c9275e

Are you able to test it?

> Once I have restored the capability, I'll post updated RHEL RPMs to
> clusterlabs.org/rpm-next
>
>>   I think the ACL's got roped in because I tried to implement them to solve
>>   the problem.  Which as you've both mentioned aren't in the release I'm using.
>>
>>
>>
>>
>> _______________________________________________
>> Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
>> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
>>
>> Project Home: http://www.clusterlabs.org
>> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
>> Bugs: http://bugs.clusterlabs.org