RHBA-2015:0393 - Bug Fix Advisory

Topic

Updated fence-agents packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 7.

Description

The fence-agents packages provide a collection of scripts for handling remote
power management for cluster devices. They allow failed or unreachable nodes to
be forcibly restarted and removed from the cluster.

The fence-agents packages have been upgraded to upstream version 4.0.11, which
provides a number of bug fixes and enhancements over the previous version,
including:

• Fence agents no longer report the unknown "nodename" option as a warning.

This option is now ignored without notification.

• Fence agents that connected using the SSH protocol failed to log in if an

identity file was used as the method of authentication. The bug has been fixed,
and these fence agents now successfully authenticate through an identity file.

• The "--delay" option has been added to the fence agent for WTI firmware.
• Previously, when password was not provided for the fence_ipmilan agent and

IPMI required password, the agent waited for an infinite amount of time. With
this update, the fence agent exits correctly in the described case.

• The fence_wti utility now displays "named groups" names when executed with

the "list" option.

• Previously, the fence_rsb agent was unable to work with certain versions

of firmware. As a consequence, fence_rsb failed after an outlet powered off.
However, fence_rsb kept on issuing the command to power the outlet back on. With
this update, new firmware versions are supported, and fence_rsb succeeds in
turning the outlet on and off.

• Previously, the fence_vmware_soap and fence_cisco_ucs agents did not log

out after an error. Consequently, other fence agents could not log in because
the maximum number of sessions was reached. With this update, sessions are
closed properly.

• With this update, the fence_brocade agent has been enhanced with ability

to list available plugs.

• Fence agent for HP iLO 3 and HP iLO 4 firmware that communicates over SSH

has been added.

• Fence agent for APC over SNMP has been updated to support the latest versions

of firmware.

• The fence_zvmip agent has been modified to return correct exit codes in case

of incorrect plug name and for "-o" status.

(BZ#1120682, BZ#1068692, BZ#1073947, BZ#1079282, BZ#1083600, BZ#1085887,
BZ#1094520, BZ#1111597, BZ#1111599, BZ#1114526, BZ#1121122, BZ#1126488,
BZ#1173178)

Users of fence-agents are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1068692 - fence_apc: Parse error: Ignoring unknown option 'nodename=dash-03
• BZ - 1073947 - Fence-agent (ssh) fails on login if identity file was used
• BZ - 1079282 - fence_wti do not support --delay when using telnet
• BZ - 1083600 - fence_ipmilan waits for password infinitely
• BZ - 1085887 - list named groups for WTI devices
• BZ - 1114526 - Add action 'list' for fence brocade
• BZ - 1120682 - Rebase of fence agents
• BZ - 1121122 - [RFE] Support fencing for iLO over SSH
• BZ - 1162092 - HTTPS connection do not validate certificate

CVEs

(none)

References

(none)