TOPIC:

Hi,

when i install ha-lizard on XCP-ng (8.x) then xensource.log is filling with error every "MONITOR_DELAY" secs. Tried on XCP-ng 8.0, 8.1 and 8.2. I don't know if error appears in XCP-ng 7.x

error will disappear when i stop ha-lizard and ha-lizard-watchdog services on slave server

In attachments is user.log and ha-cfg

configs:
XCP-master:
management: 10.1.0.60
iscsi: 10.1.10.2

XCP-slave:
management: 10.1.0.61
iscsi: 10.1.10.3

iscsi floating: 10.1.10.4
heuristic: 10.1.0.3 (switch directly connected to both XCP servers)


Nov 24 11:31:50 XCP1 xapi: [ info||25757 INET :::80|session.login_with_password D:7e7b54e79646|xapi_session] Failed to locally authenticate user root from HTTP request from Internet with User-Agent: xmlrpclib.py/1.0.1 (by www.pythonware.com): Authentication failure
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] session.login_with_password D:7e7b54e79646 failed with exception Server_error(SESSION_AUTHENTICATION_FAILED, [ root; Authentication failure ])
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] Raised Server_error(SESSION_AUTHENTICATION_FAILED, [ root; Authentication failure ])
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 1/8 xapi Raised at file ocaml/xapi/xapi_session.ml, line 511
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 2/8 xapi Called from file ocaml/xapi/xapi_session.ml, line 45
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 3/8 xapi Called from file ocaml/xapi/xapi_session.ml, line 47
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 4/8 xapi Called from file ocaml/xapi/server_helpers.ml, line 103
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 5/8 xapi Called from file ocaml/xapi/server_helpers.ml, line 121
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 6/8 xapi Called from file lib/xapi-stdext-pervasives/pervasiveext.ml, line 24
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 7/8 xapi Called from file lib/xapi-stdext-pervasives/pervasiveext.ml, line 35
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace] 8/8 xapi Called from file lib/backtrace.ml, line 177
Nov 24 11:31:55 XCP1 xapi: [error||25757 INET :::80||backtrace]

Nov 24 11:32:10 XCP1 xapi: [ info||25952 INET :::80|session.login_with_password D:5f596cfd9277|xapi_session] Failed to locally authenticate user root from HTTP request from Internet with User-Agent: xmlrpclib.py/1.0.1 (by www.pythonware.com): Authentication failure
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] session.login_with_password D:5f596cfd9277 failed with exception Server_error(SESSION_AUTHENTICATION_FAILED, [ root; Authentication failure ])
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] Raised Server_error(SESSION_AUTHENTICATION_FAILED, [ root; Authentication failure ])
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 1/8 xapi Raised at file ocaml/xapi/xapi_session.ml, line 511
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 2/8 xapi Called from file ocaml/xapi/xapi_session.ml, line 45
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 3/8 xapi Called from file ocaml/xapi/xapi_session.ml, line 47
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 4/8 xapi Called from file ocaml/xapi/server_helpers.ml, line 103
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 5/8 xapi Called from file ocaml/xapi/server_helpers.ml, line 121
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 6/8 xapi Called from file lib/xapi-stdext-pervasives/pervasiveext.ml, line 24
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 7/8 xapi Called from file lib/xapi-stdext-pervasives/pervasiveext.ml, line 35
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace] 8/8 xapi Called from file lib/backtrace.ml, line 177
Nov 24 11:32:15 XCP1 xapi: [error||25952 INET :::80||backtrace]

so i figured out that the error appears on master when on slave is called /etc/ha-lizard/scripts/host_is_slave

i eddited script and it seems OK now
...
session.xenapi.login_with_password('root','<filled password>')
result = ["HOST_IS_MASTER"]
...

Any chance you are using a version of HA-Lizard older than version 2.2.2? We fixed this about a year ago. It had to do with a forced SSL check in the version of XAPI used with release 8.

Below snippet is from our release notes:
Version 2.2.2 - Sep 2019
- Verified XCP-ng/Citrix version 8 interoperability
- Bugfix: Email handler was not properly handling SSL connections to an SMTP server and was attempting TLS on a SSL port. Resolved
- Fix XenAPI call ssl error introduced in XCP/XS version 8 which now forces a certificate check that fails on default self signed certificate. Using HTTP instead

---

| ha-lizard Version: 2.2.3 |
| Operating Mode: Mode [ 2 ] Managing All VMs in Pool |
| Host Role: master |
| Pool UUID: 796e5650-8487-27c6-adb6-bfc2355cfc5b |
| Host UUID: ccddd8a6-18b2-48d5-b449-036c1139924d |
| Master UUID: ccddd8a6-18b2-48d5-b449-036c1139924d |
| Daemon Status: ha-lizard is running [ OK ] |
| Watchdog Status: ha-lizard-watchdog is running [ OK ] |
| HA Enabled: false |

---

---

| iSCSI-HA Version IHA_2.2.4 |
| Mon Nov 30 08:23:04 CET 2020 |

---

---

| DRBD Status |

---

---

| version: 8.4.10 (api:1/proto:86-101) |