RHBA-2014:1211 - Bug Fix Advisory

Topic

Updated cman packages that fix several bugs and add one enhancement are now
available for Red Hat Enterprise Linux 5.

Description

The Cluster Manager (cman) utility provides user-level services for managing a
Linux cluster.

This update fixes the following bugs:

• Due to incorrect quorum disk configuration, some cluster nodes could display

an incorrect "Member status" value if the cluster was restarted by the qdisk
quorum daemon. This update amends the quorum disk configuration and cluster
nodes now display the correct status in the scenario described.
(BZ#994187)

• Previously, the fence_cisco_ucs fence agent did not respect the "delay"

attribute, which could lead to a situation in which two nodes fenced each other.
This bug has been fixed and fence_cisco_ucs now waits for the given amount of
time as expected. (BZ#994228)

• A node on a two-node cluster could, under some circumstances, fail to unlink a

checkpoint. As a consequence, both cluster nodes on the cluster could
simultaneously be granted a lock on the same file located on a GFS2 file system.
With this update, checkpoints on two-node clusters are unlinked as intended, and
only one cluster can now hold a lock to a file at a time. (BZ#1017916)

• Due to a configuration error, qdisk in some situations used an

incorrect tko parameter for its wait period when initializing. Consequently,
qdisk initialization could be significantly delayed and, under some
circumstances, it failed entirely. With this update, the cluster configuration
file has been amended and qdisk initialization now proceeds as expected.
(BZ#1029191)

• Due to errors in the login code for the fencing.py file, the fence_bladecenter

fence agent was not able to log into fence devices. The login code for
fencing.py has been fixed, and fence_bladecenter now logs into fence devices as
expected. (BZ#1040099)

• Prior to this update, fence agents that connected using the SSH protocol

failed on login if an identity file was used as the method of authentication.
The bug has been fixed and these fence agents now successfully authenticate
using an identity file. (BZ#1075691)

In addition, this update adds the following enhancement:

• The support for the "--delay" option has been added to the fence_vmware_soap

fencing agent. This option allows the user to avoid fence races, and thus
prevents nodes from potentially fencing each other. (BZ#1072605)

Users of cman are advised to upgrade to these updated packages, which fix these
bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1075691 - Fence-agent (ssh) fails on login if identity file was used

CVEs

(none)

References

(none)