You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "David Amorim Faria (JIRA)" <ji...@apache.org> on 2015/12/10 17:18:11 UTC

[jira] [Commented] (CLOUDSTACK-9035) Password file is stored only with Master when we Reset Password on the VM.

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-9035?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15051165#comment-15051165 ] 

David Amorim Faria commented on CLOUDSTACK-9035:
------------------------------------------------

Created redundant VPC and deployed VM there. The VM root password was not correct.
Went to the VR to check the logs.

VR master /var/log/cloud.log: {noformat}
2015-12-10 10:16:52,779  merge.py load:56 Creating data bag type vmpassword
2015-12-10 10:16:52,780  merge.py process:99 Command of type vmpassword received
2015-12-10 10:16:52,780  merge.py save:70 Writing data bag type vmpassword
2015-12-10 10:16:52,780  merge.py save:71 {u'172.16.0.152': u'AABs3A', 'id': u'vmpassword'}
(...)
2015-12-10 10:16:52,825  configure.py main:889 Configuring vmpassword
2015-12-10 10:16:52,825  merge.py load:59 Loading data bag type vmpassword
2015-12-10 10:16:52,826  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 10:16:52,829  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:16:52,837  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 10:16:52,838  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:16:52,845  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 10:16:52,845  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:16:52,853  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 10:16:52,853  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:16:52,860  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.142'] and found PIDs ==> []
2015-12-10 10:16:52,861  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:16:52,868  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.254'] and found PIDs ==> ['7754']
2015-12-10 10:16:52,874  CsHelper.py execute:160 Executing: curl --header "DomU_Request: save_password" "http://172.16.0.254:8080/" -F "ip=172.16.0.152" -F "password=AABs3A" -F "token=22009a29a516ca5bfd3ded46318180f0" >/dev/null 2>/dev/null &
2015-12-10 10:16:52,882  configure.py __update:74 Update password server result ==> []
(...)
2015-12-10 10:17:00,517  configure.py main:889 Configuring vmpassword
2015-12-10 10:17:00,517  merge.py load:59 Loading data bag type vmpassword
2015-12-10 10:17:00,517  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 10:17:00,521  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,533  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 10:17:00,533  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,541  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 10:17:00,541  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,549  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 10:17:00,549  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,556  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.142'] and found PIDs ==> []
2015-12-10 10:17:00,556  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,564  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.254'] and found PIDs ==> ['7754']
2015-12-10 10:17:00,564  CsHelper.py execute:160 Executing: curl --header "DomU_Request: save_password" "http://172.16.0.254:8080/" -F "ip=172.16.0.152" -F "password=AABs3A" -F "token=22009a29a516ca5bfd3ded46318180f0" >/dev/null 2>/dev/null &
2015-12-10 10:17:00,565  configure.py __update:74 Update password server result ==> []
{noformat}

VR slave /var/log/cloud.log: {noformat}
2015-12-10 10:16:59,974  merge.py load:56 Creating data bag type vmpassword
2015-12-10 10:16:59,975  merge.py process:99 Command of type vmpassword received
2015-12-10 10:16:59,975  merge.py save:70 Writing data bag type vmpassword
2015-12-10 10:16:59,975  merge.py save:71 {u'172.16.0.152': u'AABs3A', 'id': u'vmpassword'}
(...)
2015-12-10 10:17:00,043  configure.py main:889 Configuring vmpassword
2015-12-10 10:17:00,043  merge.py load:59 Loading data bag type vmpassword
2015-12-10 10:17:00,043  configure.py __update:63 File /tmp/passwdsrvrtoken does not exist
2015-12-10 10:17:00,043  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 10:17:00,047  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,055  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 10:17:00,055  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,062  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.2.64'] and found PIDs ==> []
2015-12-10 10:17:00,062  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,069  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 10:17:00,069  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:00,077  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.53'] and found PIDs ==> []
(...)
2015-12-10 10:17:02,555  configure.py main:889 Configuring vmpassword
2015-12-10 10:17:02,555  merge.py load:59 Loading data bag type vmpassword
2015-12-10 10:17:02,555  configure.py __update:63 File /tmp/passwdsrvrtoken does not exist
2015-12-10 10:17:02,555  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 10:17:02,559  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:02,567  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 10:17:02,567  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:02,574  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.2.64'] and found PIDs ==> []
2015-12-10 10:17:02,574  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:02,582  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 10:17:02,582  CsHelper.py execute:160 Executing: ps aux
2015-12-10 10:17:02,589  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.53'] and found PIDs ==> []
{noformat}


Stopped VM, changed password, started VM.
Password has been reset to Zbt66W

VR master /var/log/cloud.log: {noformat}
2015-12-10 15:12:05,375  configure.py main:889 Configuring vmpassword
2015-12-10 15:12:05,375  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:12:05,376  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:12:05,379  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:12:05,387  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:12:05,387  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:12:05,395  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:12:05,395  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:12:05,403  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:12:05,403  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:12:05,410  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.142'] and found PIDs ==> []
2015-12-10 15:12:05,410  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:12:05,418  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.254'] and found PIDs ==> ['7754']
2015-12-10 15:12:05,418  CsHelper.py execute:160 Executing: curl --header "DomU_Request: save_password" "http://172.16.0.254:8080/" -F "ip=172.16.0.152" -F "password=AABs3A" -F "token=22009a29a516ca5bfd3ded46318180f0" >/dev/null 2>/dev/null &
2015-12-10 15:12:05,419  configure.py __update:74 Update password server result ==> []
(...)
2015-12-10 15:18:03,170  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:18:03,171  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:18:03,174  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:03,182  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:18:03,182  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:03,189  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:18:03,189  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:03,196  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:18:03,196  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:03,203  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.98'] and found PIDs ==> []
(...)
2015-12-10 15:18:15,952  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:18:15,952  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:18:15,956  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:15,964  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:18:15,964  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:15,971  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:18:15,971  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:15,978  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:18:15,978  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:15,985  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.98'] and found PIDs ==> []
(...)
2015-12-10 15:18:26,068  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:18:26,068  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:18:26,072  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:26,080  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:18:26,080  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:26,087  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:18:26,087  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:26,094  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:18:26,094  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:26,101  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.98'] and found PIDs ==> []
(...)
2015-12-10 15:18:35,852  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:18:35,852  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:18:35,855  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:35,863  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:18:35,863  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:35,870  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:18:35,870  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:35,877  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:18:35,877  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:18:35,884  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.98'] and found PIDs ==> []
{noformat}

Stopped VM, changed password again, Started VM.
Password has been reset to OGF8c5

VR master /var/log/cloud.log: {noformat}
2015-12-10 15:33:00,195  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:33:00,195  merge.py process:99 Command of type vmpassword received
2015-12-10 15:33:00,196  merge.py save:70 Writing data bag type vmpassword
2015-12-10 15:33:00,196  merge.py save:71 {u'172.16.0.152': u'OGF8c5', u'id': u'vmpassword'}
(...)
2015-12-10 15:33:02,503  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:33:02,503  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:33:02,507  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:33:02,514  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:33:02,515  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:33:02,522  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:33:02,522  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:33:02,529  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:33:02,529  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:33:02,536  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.98'] and found PIDs ==> []
(...)
2015-12-10 15:43:46,417  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:43:46,417  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:43:46,420  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:46,427  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:43:46,428  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:46,434  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:43:46,435  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:46,441  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
2015-12-10 15:43:46,441  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:46,448  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '172.16.0.98'] and found PIDs ==> []
(...)
2015-12-10 15:43:56,234  merge.py load:59 Loading data bag type vmpassword
2015-12-10 15:43:56,234  CsHelper.py execute:160 Executing: ip addr show | grep inet | awk '{print $2}'
2015-12-10 15:43:56,237  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:56,245  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '127.0.0.1'] and found PIDs ==> []
2015-12-10 15:43:56,245  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:56,251  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '169.254.1.22'] and found PIDs ==> []
2015-12-10 15:43:56,252  CsHelper.py execute:160 Executing: ps aux
2015-12-10 15:43:56,258  CsProcess.py find_pid:50 CsProcess:: Searching for process ==> ['/opt/cloud/bin/passwd_server_ip.py', '5.79.101.133'] and found PIDs ==> []
{noformat}

In VR slave the logs kept saying the same as before, and the first password reset does not show up in the logs.


> Password file is stored only with Master when we Reset Password on the VM.
> --------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-9035
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9035
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Virtual Router
>    Affects Versions: 4.6.0
>            Reporter: Bharat Kumar
>            Assignee: Wilder Rodrigues
>            Priority: Critical
>             Fix For: 4.6.1
>
>
> we send the save password command to both the VRs in a rvr enabled network, But the password gets saved only in the master VR. This happens because the password server is not running in the backup. 
> Because of this if someone resets the password of a VM and starts it when the backup becomes master. Then the password of the user VM will not change, because the save password command was not successful.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)