<div dir="ltr"><div dir="ltr"><div dir="ltr">hi Sunny,<div> Passwordless ssh to :</div><div><br></div><div>ssh -oPasswordAuthentication=no -oStrictHostKeyChecking=no -i /var/lib/glusterd/geo-replication/secret.pem -p 22 <a href="mailto:azureuser@172.16.201.35">azureuser@172.16.201.35</a> <br></div><div><br></div><div>is login, but when the whole command is run getting permission issues again::</div><div><br></div><div><div>ssh -oPasswordAuthentication=no -oStrictHostKeyChecking=no -i /var/lib/glusterd/geo-replication/secret.pem -p 22 <a href="mailto:azureuser@172.16.201.35">azureuser@172.16.201.35</a> gluster --xml --remote-host=localhost volume info vol_a5aee81a873c043c99a938adcb5b5781 -v</div><div>ERROR: failed to create logfile "/var/log/glusterfs/cli.log" (Permission denied)</div><div>ERROR: failed to open logfile /var/log/glusterfs/cli.log</div></div><div><br></div><div>any idea here ?</div><div><br></div><div>thanks,</div><div>Maurya</div><div><br></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Mar 21, 2019 at 2:43 PM Maurya M <<a href="mailto:mauryam@gmail.com">mauryam@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr">hi Sunny,<div> i did use the [1] link for the setup, when i encountered this error during ssh-copy-id : (so setup the passwordless ssh, by manually copied the private/ public keys to all the nodes , both master & slave)</div><div><br></div><div><div>[root@k8s-agentpool1-24779565-1 ~]# ssh-copy-id geouser@xxx.xx.xxx.x</div><div>/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"</div><div>The authenticity of host '
xxx.xx.xxx.x (
xxx.xx.xxx.x )' can't be established.</div><div>ECDSA key fingerprint is SHA256:B2rNaocIcPjRga13oTnopbJ5KjI/7l5fMANXc+KhA9s.</div><div>ECDSA key fingerprint is MD5:1b:70:f9:7a:bf:35:33:47:0c:f2:c1:cd:21:e2:d3:75.</div><div>Are you sure you want to continue connecting (yes/no)? yes</div><div>/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed</div><div>/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys</div><div>Permission denied (publickey).</div></div><div><br></div><div>To start afresh what all needs to teardown / delete, do we have any script for it ? where all the pem keys do i need to delete?</div><div><br></div><div>thanks,</div><div>Maurya</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Mar 21, 2019 at 2:12 PM Sunny Kumar <<a href="mailto:sunkumar@redhat.com" target="_blank">sunkumar@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hey you can start a fresh I think you are not following proper setup steps.<br>
<br>
Please follow these steps [1] to create geo-rep session, you can<br>
delete the old one and do a fresh start. Or alternative you can use<br>
this tool[2] to setup geo-rep.<br>
<br>
<br>
[1]. <a href="https://docs.gluster.org/en/latest/Administrator%20Guide/Geo%20Replication/" rel="noreferrer" target="_blank">https://docs.gluster.org/en/latest/Administrator%20Guide/Geo%20Replication/</a><br>
[2]. <a href="http://aravindavk.in/blog/gluster-georep-tools/" rel="noreferrer" target="_blank">http://aravindavk.in/blog/gluster-georep-tools/</a><br>
<br>
<br>
/Sunny<br>
<br>
On Thu, Mar 21, 2019 at 11:28 AM Maurya M <<a href="mailto:mauryam@gmail.com" target="_blank">mauryam@gmail.com</a>> wrote:<br>
><br>
> Hi Sunil,<br>
> I did run the on the slave node :<br>
> /usr/libexec/glusterfs/set_geo_rep_pem_keys.sh azureuser vol_041afbc53746053368a1840607636e97 vol_a5aee81a873c043c99a938adcb5b5781<br>
> getting this message "/home/azureuser/common_secret.pem.pub not present. Please run geo-replication command on master with push-pem option to generate the file"<br>
><br>
> So went back and created the session again, no change, so manually copied the common_secret.pem.pub to /home/azureuser/ but still the set_geo_rep_pem_keys.sh is looking the pem file in different name : COMMON_SECRET_PEM_PUB=${master_vol}_${slave_vol}_common_secret.pem.pub , change the name of pem , ran the command again :<br>
><br>
> /usr/libexec/glusterfs/set_geo_rep_pem_keys.sh azureuser vol_041afbc53746053368a1840607636e97 vol_a5aee81a873c043c99a938adcb5b5781<br>
> Successfully copied file.<br>
> Command executed successfully.<br>
><br>
><br>
> - went back and created the session , start the geo-replication , still seeing the same error in logs. Any ideas ?<br>
><br>
> thanks,<br>
> Maurya<br>
><br>
><br>
><br>
> On Wed, Mar 20, 2019 at 11:07 PM Sunny Kumar <<a href="mailto:sunkumar@redhat.com" target="_blank">sunkumar@redhat.com</a>> wrote:<br>
>><br>
>> Hi Maurya,<br>
>><br>
>> I guess you missed last trick to distribute keys in slave node. I see<br>
>> this is non-root geo-rep setup so please try this:<br>
>><br>
>><br>
>> Run the following command as root in any one of Slave node.<br>
>><br>
>> /usr/local/libexec/glusterfs/set_geo_rep_pem_keys.sh <slave_user><br>
>> <master_volume> <slave_volume><br>
>><br>
>> - Sunny<br>
>><br>
>> On Wed, Mar 20, 2019 at 10:47 PM Maurya M <<a href="mailto:mauryam@gmail.com" target="_blank">mauryam@gmail.com</a>> wrote:<br>
>> ><br>
>> > Hi all,<br>
>> > Have setup a 3 master nodes - 3 slave nodes (gluster 4.1) for geo-replication, but once have the geo-replication configure the status is always on "Created',<br>
>> > even after have force start the session.<br>
>> ><br>
>> > On close inspect of the logs on the master node seeing this error:<br>
>> ><br>
>> > "E [syncdutils(monitor):801:errlog] Popen: command returned error cmd=ssh -oPasswordAuthentication=no -oStrictHostKeyChecking=no -i /var/lib/glusterd/geo-replication/secret.pem -p 22 azureuser@xxxxx.xxxx..xxx. gluster --xml --remote-host=localhost volume info vol_a5ae34341a873c043c99a938adcb5b5781 error=255"<br>
>> ><br>
>> > Any ideas what is issue?<br>
>> ><br>
>> > thanks,<br>
>> > Maurya<br>
>> ><br>
>> > _______________________________________________<br>
>> > Gluster-users mailing list<br>
>> > <a href="mailto:Gluster-users@gluster.org" target="_blank">Gluster-users@gluster.org</a><br>
>> > <a href="https://lists.gluster.org/mailman/listinfo/gluster-users" rel="noreferrer" target="_blank">https://lists.gluster.org/mailman/listinfo/gluster-users</a><br>
</blockquote></div></div>
</blockquote></div>