Hello, on 4.1.6 I'm configuring fencing on HP blades Gen9. It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as the port and ssh=1 in options Question: why ssh=1??? the agent is named ilo_ssh.... shouldn't be obvious??? The same form command line I MUST set -x even if I use fence_ilo_ssh command Nevertheless, this way I get successful test Sometimes I don't get the same result if I run from shell eg: fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x -o status I get sometimes: Unable to connect/login to fencing device I think it could be some sort of delay timeout. In fence_ilo_ssh I see these kinds of timeouts in help --power-timeout=[seconds] Test X seconds for status change after ON/OFF --shell-timeout=[seconds] Wait X seconds for cmd prompt after issuing command --login-timeout=[seconds] Wait X seconds for cmd prompt after login --power-wait=[seconds] Wait X seconds after issuing ON/OFF --delay=[seconds] Wait X seconds before fencing is started How do they map with gui settings options in case I would use some of them? Also, how do I map the command line option -4, --inet4-only Perhaps inet4_only=1 ? I see that ssh=1,inet4_only=1 works but also ssh=1,inet4_only=1,foo=1 works So it is not a reliable test to verify syntax... All in all do you think it is the best agent for ilo4 based blades? I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason? Thanks, Gianluca
I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to ilo4 and everything works fine. Nothing special on the ilo side, just up to date firmware.
Le 5 oct. 2017 à 09:53, Gianluca Cecchi <gianluca.cecchi@gmail.com> a écrit :
Hello, on 4.1.6 I'm configuring fencing on HP blades Gen9. It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as the port and ssh=1 in options
Question: why ssh=1??? the agent is named ilo_ssh.... shouldn't be obvious??? The same form command line I MUST set -x even if I use fence_ilo_ssh command
Nevertheless, this way I get successful test
Sometimes I don't get the same result if I run from shell eg:
fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x -o status
I get sometimes: Unable to connect/login to fencing device
I think it could be some sort of delay timeout. In fence_ilo_ssh I see these kinds of timeouts in help
--power-timeout=[seconds] Test X seconds for status change after ON/OFF --shell-timeout=[seconds] Wait X seconds for cmd prompt after issuing command --login-timeout=[seconds] Wait X seconds for cmd prompt after login --power-wait=[seconds] Wait X seconds after issuing ON/OFF --delay=[seconds] Wait X seconds before fencing is started
How do they map with gui settings options in case I would use some of them?
Also, how do I map the command line option
-4, --inet4-only
Perhaps inet4_only=1 ?
I see that
ssh=1,inet4_only=1 works
but also ssh=1,inet4_only=1,foo=1 works
So it is not a reliable test to verify syntax...
All in all do you think it is the best agent for ilo4 based blades? I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason?
Thanks, Gianluca _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Same here. I'm only ensuring ilo4 is up to date and ovirtmgmt network can reach ilo network. On Thu, Oct 5, 2017 at 10:15 AM, Fabrice Bacchella <fabrice.bacchella@orange.fr> wrote:
I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to ilo4 and everything works fine.
Nothing special on the ilo side, just up to date firmware.
Le 5 oct. 2017 à 09:53, Gianluca Cecchi <gianluca.cecchi@gmail.com> a écrit :
Hello, on 4.1.6 I'm configuring fencing on HP blades Gen9. It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as the port and ssh=1 in options
Question: why ssh=1??? the agent is named ilo_ssh.... shouldn't be obvious??? The same form command line I MUST set -x even if I use fence_ilo_ssh command
Nevertheless, this way I get successful test
Sometimes I don't get the same result if I run from shell eg:
fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x -o status
I get sometimes: Unable to connect/login to fencing device
I think it could be some sort of delay timeout. In fence_ilo_ssh I see these kinds of timeouts in help
--power-timeout=[seconds] Test X seconds for status change after ON/OFF --shell-timeout=[seconds] Wait X seconds for cmd prompt after issuing command --login-timeout=[seconds] Wait X seconds for cmd prompt after login --power-wait=[seconds] Wait X seconds after issuing ON/OFF --delay=[seconds] Wait X seconds before fencing is started
How do they map with gui settings options in case I would use some of them?
Also, how do I map the command line option
-4, --inet4-only
Perhaps inet4_only=1 ?
I see that
ssh=1,inet4_only=1 works
but also ssh=1,inet4_only=1,foo=1 works
So it is not a reliable test to verify syntax...
All in all do you think it is the best agent for ilo4 based blades? I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason?
Thanks, Gianluca _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- "E' assurdo impiegare gli uomini di intelligenza eccellente per fare calcoli che potrebbero essere affidati a chiunque se si usassero delle macchine" Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716) "Internet è la più grande biblioteca del mondo. Ma il problema è che i libri sono tutti sparsi sul pavimento" John Allen Paulos, Matematico (1945-vivente) Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <lorenzetto.luca@gmail.com>
On Thu, Oct 5, 2017 at 10:15 AM, Fabrice Bacchella < fabrice.bacchella@orange.fr> wrote:
I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to ilo4 and everything works fine.
Nothing special on the ilo side, just up to date firmware.
Also these blades are BL460c Gen9 I'm not the admin of fw of blades, but I can see that the blades have version 2.53 for firmware and version 1.0.9 for their power mgmt controller. And the enclosures have fw with version 4.60 Did you create a special user for the iLO fencing of the servers (in my case fenceuser)? If so, which kind of privileges did you assign to this user? I also see that the IPMI settings seem ok: IPMI/DCMI over LAN Access is enabled IPMI/DCMI over LAN Port is the default 623 one but fence_ilo4 -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -o status Failed: Unable to obtain correct plug status or plug is not available Even if I try -4 and/or -P and/or -L operator and/or -A password I get the same error
On Thu, Oct 5, 2017 at 9:53 AM, Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
Hello, on 4.1.6 I'm configuring fencing on HP blades Gen9. It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as the port and ssh=1 in options
Question: why ssh=1??? the agent is named ilo_ssh.... shouldn't be obvious??? The same form command line I MUST set -x even if I use fence_ilo_ssh command
Nevertheless, this way I get successful test
Sometimes I don't get the same result if I run from shell eg:
fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x -o status
I get sometimes: Unable to connect/login to fencing device
I think it could be some sort of delay timeout. In fence_ilo_ssh I see these kinds of timeouts in help
--power-timeout=[seconds] Test X seconds for status change after ON/OFF --shell-timeout=[seconds] Wait X seconds for cmd prompt after issuing command --login-timeout=[seconds] Wait X seconds for cmd prompt after login --power-wait=[seconds] Wait X seconds after issuing ON/OFF --delay=[seconds] Wait X seconds before fencing is started
How do they map with gui settings options in case I would use some of them?
Please take a look at man page of fence_ilo_ssh and scroll down to STDIN PARAMETERS section. These parameters needs to be used in Options field in webadmin
Also, how do I map the command line option
-4, --inet4-only
Perhaps inet4_only=1 ?
Correct
I see that
ssh=1,inet4_only=1 works
but also ssh=1,inet4_only=1,foo=1 works
Yes, we just pass the parameters to fence agent and if it don't complain about unknown parameter, we have no way how to present that to a user.
So it is not a reliable test to verify syntax...
All in all do you think it is the best agent for ilo4 based blades?
Yes, according to our knowledge ilo4 should be used for all new HP servers (and also ilo4 agent has most of default parameters, so if you don't have some special configuration on your server you should be fine.
I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason?
If you are using admin user, then the default should be fine. If you are want to create a special user just for oVirt PM operations then following permissions needs to be assigned to user within iLO4 configuration: Virtual power and reset Remote Console Access Virtual Media And you need to add following into Options for the host PM settings: privlvl=operator Thanks Martin
Thanks, Gianluca
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina <mperina@redhat.com> wrote:
Please take a look at man page of fence_ilo_ssh and scroll down to STDIN PARAMETERS section. These parameters needs to be used in Options field in webadmin
It seems on ovirt node the man pages are missing, probably to cut off installation base.. ;-) Anyway I would check installing the ordinary rpm package on a base CentOS 7 system. In the mean time I have checked the STDIN PARAMETERS section of fence_ilo4 man page for a CentOS 6.7 clustersuite server I have at hand, thanks. I think it should be similar
All in all do you think it is the best agent for ilo4 based blades?
Yes, according to our knowledge ilo4 should be used for all new HP servers (and also ilo4 agent has most of default parameters, so if you don't have some special configuration on your server you should be fine.
I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason?
If you are using admin user, then the default should be fine. If you are want to create a special user just for oVirt PM operations then following permissions needs to be assigned to user within iLO4 configuration:
Virtual power and reset Remote Console Access Virtual Media
And you need to add following into Options for the host PM settings:
privlvl=operator
Thanks
Martin
Perfect: it works. Assigned the three privileges to the fenceuser user and now the corresponding command line works # fence_ilo4 -a ilo_ip -l fenceuser -L operator -S /usr/local/bin/my_fence_script.sh -o status Status: ON # And also from gui the test is ok using ilo4 type and "privlvl=operator,inet4_only=1" option BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual power and reset" privilege for the dedicated user (at least to get the status of the blade) Thanks again, Gianluca
On Thu, Oct 5, 2017 at 11:38 AM, Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina <mperina@redhat.com> wrote:
Please take a look at man page of fence_ilo_ssh and scroll down to STDIN PARAMETERS section. These parameters needs to be used in Options field in webadmin
It seems on ovirt node the man pages are missing, probably to cut off installation base.. ;-)
Unfortunately you are right, space saving :-(
Anyway I would check installing the ordinary rpm package on a base CentOS 7 system. In the mean time I have checked the STDIN PARAMETERS section of fence_ilo4 man page for a CentOS 6.7 clustersuite server I have at hand, thanks. I think it should be similar
They should be more or less the same ...
All in all do you think it is the best agent for ilo4 based blades?
Yes, according to our knowledge ilo4 should be used for all new HP servers (and also ilo4 agent has most of default parameters, so if you don't have some special configuration on your server you should be fine.
I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason?
If you are using admin user, then the default should be fine. If you are want to create a special user just for oVirt PM operations then following permissions needs to be assigned to user within iLO4 configuration:
Virtual power and reset Remote Console Access Virtual Media
And you need to add following into Options for the host PM settings:
privlvl=operator
Thanks
Martin
Perfect: it works. Assigned the three privileges to the fenceuser user and now the corresponding command line works
# fence_ilo4 -a ilo_ip -l fenceuser -L operator -S /usr/local/bin/my_fence_script.sh -o status Status: ON #
And also from gui the test is ok using ilo4 type and "privlvl=operator,inet4_only=1" option
Great to hear!
BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual power and reset" privilege for the dedicated user (at least to get the status of the blade)
Thanks for info! Martin
Thanks again, Gianluca
On Thu, Oct 5, 2017 at 1:58 PM, Martin Perina <mperina@redhat.com> wrote:
On Thu, Oct 5, 2017 at 11:38 AM, Gianluca Cecchi < gianluca.cecchi@gmail.com> wrote:
On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina <mperina@redhat.com> wrote:
Please take a look at man page of fence_ilo_ssh and scroll down to STDIN PARAMETERS section. These parameters needs to be used in Options field in webadmin
It seems on ovirt node the man pages are missing, probably to cut off installation base.. ;-)
Unfortunately you are right, space saving :-(
Anyway I would check installing the ordinary rpm package on a base CentOS 7 system. In the mean time I have checked the STDIN PARAMETERS section of fence_ilo4 man page for a CentOS 6.7 clustersuite server I have at hand, thanks. I think it should be similar
They should be more or less the same ...
All in all do you think it is the best agent for ilo4 based blades?
Yes, according to our knowledge ilo4 should be used for all new HP servers (and also ilo4 agent has most of default parameters, so if you don't have some special configuration on your server you should be fine.
I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason?
If you are using admin user, then the default should be fine. If you are want to create a special user just for oVirt PM operations then following permissions needs to be assigned to user within iLO4 configuration:
Virtual power and reset Remote Console Access Virtual Media
And you need to add following into Options for the host PM settings:
privlvl=operator
Thanks
Martin
Perfect: it works. Assigned the three privileges to the fenceuser user and now the corresponding command line works
# fence_ilo4 -a ilo_ip -l fenceuser -L operator -S /usr/local/bin/my_fence_script.sh -o status Status: ON #
And also from gui the test is ok using ilo4 type and "privlvl=operator,inet4_only=1" option
Great to hear!
BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual power and reset" privilege for the dedicated user (at least to get the status of the blade)
That's right, but engine will fail to restart the server in case it is not responding if not all 3 are set ....
Thanks for info!
Martin
Thanks again, Gianluca
participants (5)
-
Eli Mesika -
Fabrice Bacchella -
Gianluca Cecchi -
Luca 'remix_tj' Lorenzetto -
Martin Perina