[Openais] Access denied when corosync is run by cman service.

[Chrissie Caulfield]

Steven Dake wrote:
> On Fri, 2009-02-13 at 10:41 -0500, Alan Conway wrote:
>> Chrissie Caulfield wrote:
>>> Alan Conway wrote:
>>>> Chrissie Caulfield wrote:
>>>>> Alan Conway wrote:
>>>>>> I've got a cluster app that works fine with corosync alone. Hoever if
>>>>>> I start corosync via cman I get errno 11 - "access denied" from
>>>>>> cpg_init. Is there some different security rule when cman is in play?
>>>>> cman enables quorum, and many IPC calls are blocked when the cluster is
>>>>> inquorate - including CPG. So it could be simply that you need to make
>>>>> sure your cluster has quorum.
>>>>>
>>>> Nope, not that. Even when cman_tool says the cluster is quorate, I get
>>>> cpg error 11 trying to start my application. Any other ideas?
>>> Well, 11 is ERR_ACCESS so it could be that your client is not running
>>> with the necessary permissions or maybe that CPG isn't loaded into corosync.
>>>
>> If I run corosync without cman, everything works fine. If I service start cman 
>> it runs corosync and I get this problem. Is there some cman configuration I need 
>> to change to get it to load CPG? Does corosync use a different config file when 
>> run by cman?
> 
> Cman may not be running the openaisserviceenble plugin.  I am not sure
> how to detect or fix this.

CPG is part of corosync, not openais so that's not relevant. corosync
prints the list of loaded plugins at startup so have a look in syslog.
To be honest it's quite hard to remove CPG from a cman node!

-- 

Chrissie