Forum
Welcome, Guest
Username: Password: Remember me
This is the optional category header for the Suggestion Box.
  • Page:
  • 1
  • 2

TOPIC:

cant start iscsi-ha 5 months 4 days ago #2072

  • gerry kernan
  • gerry kernan's Avatar Topic Author
  • Offline
  • Posts: 16
hi

just done a fresh install on xen server 8.2 but iscsi-ha is not starting . getting error below in logs
i used install script halizard_nosan_installer_2.1.7
version
IHA_2.2.4

.1"#012SMTP_USER=""#012XAPI_COUNT=2#012XAPI_DELAY=10#012XC_FIELD_NAME='ha-lizard-enabled'#012XE_TIMEOUT=10
Jun 30 19:15:17 XenServer1 iscsi-ha-init: Waiting for xapi initialize
Jun 30 19:15:17 XenServer1 iscsi-ha-init: XAPI initialized on attempt [ 0 ]
Jun 30 19:15:17 XenServer1 iscsi-ha: Firewall running OK - continue
Jun 30 19:15:17 XenServer1 iscsi-ha: Expected FW chain [RH-Firewall-1-INPUT] missing - switching to best effort for inserting replication rule
Jun 30 19:15:17 XenServer1 iscsi-ha: Cannot reliably determine FW rules chain - aborting
Jun

Please Log in or Create an account to join the conversation.

cant start iscsi-ha 5 months 4 days ago #2073

  • Salvatore Costantino
  • Salvatore Costantino's Avatar
  • Offline
  • Posts: 653
We haven't tested against 8.2 yet. Looks like the FW has changed.

Can you check whether /etc/sysconfig/iptables exists, and if it does, can you post the contents of the file.

The error you are getting is due to the chain name "RH-Firewall-1-INPUT" missing. We explicitly look for that chain to insert the rule that allows replication between the hosts.

Please Log in or Create an account to join the conversation.

cant start iscsi-ha 5 months 4 days ago #2074

  • gerry kernan
  • gerry kernan's Avatar Topic Author
  • Offline
  • Posts: 16
hi salvatore

cat /etc/sysconfig/iptables
# Generated by iptables-save v1.4.21 on Tue Jun 30 18:25:55 2020
*filter
:INPUT ACCEPT [2484664:137226084]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [363161:16807398554]
COMMIT
# Completed on Tue Jun 30 18:25:55 2020

Please Log in or Create an account to join the conversation.

cant start iscsi-ha 5 months 4 days ago #2075

  • gerry kernan
  • gerry kernan's Avatar Topic Author
  • Offline
  • Posts: 16
can i disable the firewall part of the script and add the rule manually

Please Log in or Create an account to join the conversation.

cant start iscsi-ha 5 months 4 days ago #2076

  • gerry kernan
  • gerry kernan's Avatar Topic Author
  • Offline
  • Posts: 16
hi salvatore

should i go back to xen 8.1?

gerry

Please Log in or Create an account to join the conversation.

cant start iscsi-ha 5 months 4 days ago #2077

  • Salvatore Costantino
  • Salvatore Costantino's Avatar
  • Offline
  • Posts: 653
Yes. That would be easy to do. The validation is handled inside the init script for iscsi-ha. If you edit /etc/init.d/iscsi-ha, look for the following code block and add a hash (#) in front of the &&. I would consider this only a temporary solution until we have a chance to see what's changed in 8.2
start() {
        ##############################
        ## Ensure mandatory services
        ## are running before start
        ##############################
        xapi_init_check [color=red]#[/color]&& fw_init_check
        RETVAL=$?
        if [ $RETVAL -ne 0 ]
        then
                failure $"XAPI and firewall are required to start"
                echo $"XAPI and firewall are required to start"
                exit 1
        fi

Please Log in or Create an account to join the conversation.

  • Page:
  • 1
  • 2