You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@qpid.apache.org by Jakub Scholz <ja...@scholz.cz> on 2011/08/16 19:54:39 UTC

Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Hi,

I'm trying to get Qpid 0.10 / MRG 2.0 running in cluster on RHEL 6.0
using corosync & cman. But when I try to start the broker I get
following error message:

$ qpidd --cluster-name="qpidd" --cluster-cman
2011-08-16 16:31:43 notice Journal "TplStore": Created
2011-08-16 16:31:43 notice Store module initialized;
store-dir=/var/lib/qpidd/.qpidd
2011-08-16 16:31:43 notice Initializing CPG
2011-08-16 16:31:43 critical Unexpected error: Failed to initialize
CPG.: security (100)

I've already checked the settings in /etc/corosync/uidgid.d/ and that
seems to be correct

$ cat /etc/corosync/uidgid.d/qpidd
uidgid {
        uid: qpidd
        gid: qpidd
}

Does someone have experience with this problem? Any ideas what may be the cause?

Thanks & Regards
Jakub

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Jakub Scholz <ja...@scholz.cz>.
Hi Alan,

Yes, 733221 and 733345 are covering the problem on Red Hat side. I
didn't opened an JIRA for this as I didn't wanted to trigger some
parallel processing between Red Hat and Apache. So feel free to create
one or let me know and I will do it ...

Regards
Jakub

On Mon, Sep 12, 2011 at 17:52, Alan Conway <ac...@redhat.com> wrote:
> On 09/09/2011 05:11 AM, Jakub Scholz wrote:
>>
>> Just an update to this - there seems to be a bug in the cman /
>> corosync. When they are run together, the corosync doesn't seem to
>> read the uidgid.d settings. Therefore if you want to use cman and
>> corosync, you have to run the broker as root. That is not something we
>> wanted.
>>
>> So we decided to go without cman until this issue is fixed. Running it
>> just with corosync seems to work fine for us.
>>
>
> There's a Red Hat bug open for this:
> https://bugzilla.redhat.com/show_bug.cgi?id=733221
> Did you open a JIRA for this on the qpid site? If not I can create one.
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project:      http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
>
>

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Alan Conway <ac...@redhat.com>.
On 09/09/2011 05:11 AM, Jakub Scholz wrote:
> Just an update to this - there seems to be a bug in the cman /
> corosync. When they are run together, the corosync doesn't seem to
> read the uidgid.d settings. Therefore if you want to use cman and
> corosync, you have to run the broker as root. That is not something we
> wanted.
>
> So we decided to go without cman until this issue is fixed. Running it
> just with corosync seems to work fine for us.
>

There's a Red Hat bug open for this: 
https://bugzilla.redhat.com/show_bug.cgi?id=733221
Did you open a JIRA for this on the qpid site? If not I can create one.

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Jakub Scholz <ja...@scholz.cz>.
Just an update to this - there seems to be a bug in the cman /
corosync. When they are run together, the corosync doesn't seem to
read the uidgid.d settings. Therefore if you want to use cman and
corosync, you have to run the broker as root. That is not something we
wanted.

So we decided to go without cman until this issue is fixed. Running it
just with corosync seems to work fine for us.

Regards
Jakub

On Wed, Aug 17, 2011 at 17:38, Jakub Scholz <ja...@scholz.cz> wrote:
> Well, we were trying to go according to the guide, including the
> troubleshooting chacklist. But the list seems to describe only how to
> get the cluster running using corosync only. We wanted to include cman
> in the setup - so that we have the quorum, fencing and so on. So our
> corosync is being run by the cman. And as a result, it seems that we
> can get the cluster running only under root user and not under the
> qpidd user. That's why I assume that the configuration of the
> addresses, firewalls etc. are correct. It almost seems to me like the
> corosync ignores the uidgid configuration when run by cman.
>
> A colleague of mine is now changing the setup to exclude cman - we
> will see whether that helps or not.
>
> Regards
> Jakub
>
> On Wed, Aug 17, 2011 at 14:59, Alan Conway <ac...@redhat.com> wrote:
>> On 08/16/2011 02:02 PM, Jakub Scholz wrote:
>>>
>>> Hi Andy,
>>>
>>> Yes, I'm trying to run it qpidd user:
>>>
>>> $ id
>>> uid=498(qpidd) gid=498(qpidd) groups=498(qpidd)
>>>
>>
>> Try the checklist at https://cwiki.apache.org/qpid/starting-a-cluster.html
>>
>

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Jakub Scholz <ja...@scholz.cz>.
Well, we were trying to go according to the guide, including the
troubleshooting chacklist. But the list seems to describe only how to
get the cluster running using corosync only. We wanted to include cman
in the setup - so that we have the quorum, fencing and so on. So our
corosync is being run by the cman. And as a result, it seems that we
can get the cluster running only under root user and not under the
qpidd user. That's why I assume that the configuration of the
addresses, firewalls etc. are correct. It almost seems to me like the
corosync ignores the uidgid configuration when run by cman.

A colleague of mine is now changing the setup to exclude cman - we
will see whether that helps or not.

Regards
Jakub

On Wed, Aug 17, 2011 at 14:59, Alan Conway <ac...@redhat.com> wrote:
> On 08/16/2011 02:02 PM, Jakub Scholz wrote:
>>
>> Hi Andy,
>>
>> Yes, I'm trying to run it qpidd user:
>>
>> $ id
>> uid=498(qpidd) gid=498(qpidd) groups=498(qpidd)
>>
>
> Try the checklist at https://cwiki.apache.org/qpid/starting-a-cluster.html
>

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Alan Conway <ac...@redhat.com>.
On 08/16/2011 02:02 PM, Jakub Scholz wrote:
> Hi Andy,
>
> Yes, I'm trying to run it qpidd user:
>
> $ id
> uid=498(qpidd) gid=498(qpidd) groups=498(qpidd)
>

Try the checklist at https://cwiki.apache.org/qpid/starting-a-cluster.html

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Jakub Scholz <ja...@scholz.cz>.
Hi Andy,

Yes, I'm trying to run it qpidd user:

$ id
uid=498(qpidd) gid=498(qpidd) groups=498(qpidd)

Thanks & Regards
Jakub

On Tue, Aug 16, 2011 at 19:59, Andy Goldstein <ag...@redhat.com> wrote:
> When you run qpidd, what user/group are you at that time?  Are you the qpidd user, or a different one?
>
> Andy
>
> On Aug 16, 2011, at 1:54 PM, Jakub Scholz wrote:
>
>> Hi,
>>
>> I'm trying to get Qpid 0.10 / MRG 2.0 running in cluster on RHEL 6.0
>> using corosync & cman. But when I try to start the broker I get
>> following error message:
>>
>> $ qpidd --cluster-name="qpidd" --cluster-cman
>> 2011-08-16 16:31:43 notice Journal "TplStore": Created
>> 2011-08-16 16:31:43 notice Store module initialized;
>> store-dir=/var/lib/qpidd/.qpidd
>> 2011-08-16 16:31:43 notice Initializing CPG
>> 2011-08-16 16:31:43 critical Unexpected error: Failed to initialize
>> CPG.: security (100)
>>
>> I've already checked the settings in /etc/corosync/uidgid.d/ and that
>> seems to be correct
>>
>> $ cat /etc/corosync/uidgid.d/qpidd
>> uidgid {
>>        uid: qpidd
>>        gid: qpidd
>> }
>>
>> Does someone have experience with this problem? Any ideas what may be the cause?
>>
>> Thanks & Regards
>> Jakub
>>
>> ---------------------------------------------------------------------
>> Apache Qpid - AMQP Messaging Implementation
>> Project:      http://qpid.apache.org
>> Use/Interact: mailto:users-subscribe@qpid.apache.org
>>
>
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project:      http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
>
>

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org


Re: Problem with starting qpid cluster - "Failed to initialize CPG.: security (100)"

Posted by Andy Goldstein <ag...@redhat.com>.
When you run qpidd, what user/group are you at that time?  Are you the qpidd user, or a different one?

Andy

On Aug 16, 2011, at 1:54 PM, Jakub Scholz wrote:

> Hi,
> 
> I'm trying to get Qpid 0.10 / MRG 2.0 running in cluster on RHEL 6.0
> using corosync & cman. But when I try to start the broker I get
> following error message:
> 
> $ qpidd --cluster-name="qpidd" --cluster-cman
> 2011-08-16 16:31:43 notice Journal "TplStore": Created
> 2011-08-16 16:31:43 notice Store module initialized;
> store-dir=/var/lib/qpidd/.qpidd
> 2011-08-16 16:31:43 notice Initializing CPG
> 2011-08-16 16:31:43 critical Unexpected error: Failed to initialize
> CPG.: security (100)
> 
> I've already checked the settings in /etc/corosync/uidgid.d/ and that
> seems to be correct
> 
> $ cat /etc/corosync/uidgid.d/qpidd
> uidgid {
>        uid: qpidd
>        gid: qpidd
> }
> 
> Does someone have experience with this problem? Any ideas what may be the cause?
> 
> Thanks & Regards
> Jakub
> 
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project:      http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
> 


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org