cancel
Showing results for 
Search instead for 
Did you mean: 

fence_ilo

 
Highlighted
Occasional Advisor

fence_ilo

Hi,

i have a redhat cluster that use fence_ilo as fencing device.

But if i execute:
fence_ilo -a hostname-ilo -l username -p password -o status
it have the following
Unable to connect/login to fencing device

when i execute:
ssh hostname-ilo
i get the ILO console.

any ideas?

thx in advance,
Stefano Peccenini
12 REPLIES 12
Highlighted
Honored Contributor

Re: fence_ilo

fence_ilo does not use SSH. "man fence_ilo" says it opens a SSL connection to port 443 of the iLO console, and then communicates with iLO using an XML datastream.

Test with:
telnet hostname-ilo 443

or:
lynx -dump -head https://hostname-ilo/
(if you have a version of lynx that supports https)

MK
MK
Highlighted
Occasional Advisor

Re: fence_ilo

Hi,

i tried to login via telnet on 443 port.

[root@spisap02 SSHKEY]# telnet hostname-ilo 443
Trying xx.xx.xx.xx...
Connected to spisap02-ilo.sisal.it (xx.xx.xx.xx).
Escape character is '^]'.

So ILO support the login, i don't know why fence_ilo fail the login.
Highlighted
Honored Contributor

Re: fence_ilo

The network connection works, but logging in using https is still not proven (or you haven't said so).

Try connecting with a web browser to https://hostname-ilo and log in using the username and password used with fence_ilo. Does it work?

What's your hardware model, iLO firmware version and RedHat version?
If you have one of the latest server models and an old version of RHEL, the fence_ilo version might be too old to support your hardware.

In this thread, Reiner Rottmann offers a link to an alternate iLO fencing agent:
http://h30499.www3.hp.com/t5/System-Administration/fence-ilo-repace/m-p/4756390#M43700

 

Might be worth a try.

MK

MK
Highlighted
Occasional Advisor

Re: fence_ilo

Hi, thanx for reply.

os version:
Linux 2.6.18-164.el5 #1 SMP Tue Aug 18 15:51:48 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux Server release 5.4 (Tikanga)

ILO version:
iLO 3 Firmware Jul 26 2010 1.10

I also tried to log in through web browser in https mode, and it worked fine.

thanx a lot,
Stefano Peccenini
Highlighted
Occasional Advisor

Re: fence_ilo

i forgot the cman version:
cman-2.0.115-34.el5_5.4
Highlighted
Honored Contributor

Re: fence_ilo

What Proliant model?

I have DL380 G6's and running RHEL 5.5 with the same version of RHCS bits you have and fence_ilo works beautifully.
Hakuna Matata.
Highlighted
New Member

Re: fence_ilo

Please, run fence_ilo with '-v' and '-D /tmp/outfile.txt'. Maybe it will show something interesting. Or even use tcpdump to analyze IP traffic.
Highlighted
Honored Contributor

Re: fence_ilo

were you able to fence your iLo device from your node(s)?

do you have IPTABLES set up?

As a quick test, do "service iptables stop"
Then try fence_ilo once more.

It it works -- then it is likely you need to rework your IPTABLES...

cheers.
Hakuna Matata.
Highlighted
Exalted Contributor

Re: fence_ilo

Shalom,

Advice:
1) Configure the ilo card so it uses ssh and has a valid userid/password combination.
2) Update the firmware on the ilo console to reach a supported version that HP support says it will work.
3) As noted elsewhere in the case, make sure the firewall is not hammering it. Confirm network connectivity.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com