[ClusterLabs] fence_sanlock and pacemaker

[Laurent B.]

Gents,

I'm trying to configure a HA cluster with RHEL 6.5. Everything goes well
except the fencing. The cluster's node are not connected to the
management lan (where stand all the iLO/UPS/APC devices) and it's not
planned to connecting them to this lan.

With these constraints, I figured out that a way to get fencing working
is to use *fence_sanlock*. I followed this tutorial:
https://alteeve.ca/w/Watchdog_Recovery and I it worked (I got some
problem with SELinux that I finally disabled like specified in the
following RHEL 6.5 release note:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/6.5_Technical_Notes/
)

So perfect. The problem is that fence_sanlock relies on cman and not
pacemaker. So with stonith disabled, pacemaker restarts the resources
without waiting for the victim to be fenced and with stonith enabled,
pacemaker complains about the lack of stonith resources and block all
the cluster.
I tried to put fence_sanlock as a stonith resource at the pacemaker
level but as explained there
http://oss.clusterlabs.org/pipermail/pacemaker/2013-May/017980.html it
does not work and as explained there
https://bugzilla.redhat.com/show_bug.cgi?id=962088 it's not planned to
make it work.

My question: is there a workaround ?

Thank you,

Laurent