TOPIC:

cant start iscsi-ha 3 years 9 months ago #2072

gerry kernan
Topic Author
Offline
Posts: 16

hi

just done a fresh install on xen server 8.2 but iscsi-ha is not starting . getting error below in logs
i used install script halizard_nosan_installer_2.1.7
version
IHA_2.2.4

.1"#012SMTP_USER=""#012XAPI_COUNT=2#012XAPI_DELAY=10#012XC_FIELD_NAME='ha-lizard-enabled'#012XE_TIMEOUT=10
Jun 30 19:15:17 XenServer1 iscsi-ha-init: Waiting for xapi initialize
Jun 30 19:15:17 XenServer1 iscsi-ha-init: XAPI initialized on attempt [ 0 ]
Jun 30 19:15:17 XenServer1 iscsi-ha: Firewall running OK - continue
Jun 30 19:15:17 XenServer1 iscsi-ha: Expected FW chain [RH-Firewall-1-INPUT] missing - switching to best effort for inserting replication rule
Jun 30 19:15:17 XenServer1 iscsi-ha: Cannot reliably determine FW rules chain - aborting
Jun

Please Log in or Create an account to join the conversation.

cant start iscsi-ha 3 years 9 months ago #2073

Salvatore Costantino Offline Posts: 722	We haven't tested against 8.2 yet. Looks like the FW has changed. Can you check whether /etc/sysconfig/iptables exists, and if it does, can you post the contents of the file. The error you are getting is due to the chain name "RH-Firewall-1-INPUT" missing. We explicitly look for that chain to insert the rule that allows replication between the hosts.
	Please Log in or Create an account to join the conversation.

cant start iscsi-ha 3 years 9 months ago #2074

gerry kernan Topic Author Offline Posts: 16	hi salvatore cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.21 on Tue Jun 30 18:25:55 2020 *filter :INPUT ACCEPT [2484664:137226084] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [363161:16807398554] COMMIT # Completed on Tue Jun 30 18:25:55 2020
	Please Log in or Create an account to join the conversation.

cant start iscsi-ha 3 years 9 months ago #2075

gerry kernan Topic Author Offline Posts: 16	can i disable the firewall part of the script and add the rule manually
	Please Log in or Create an account to join the conversation.

cant start iscsi-ha 3 years 9 months ago #2076

gerry kernan Topic Author Offline Posts: 16	hi salvatore should i go back to xen 8.1? gerry
	Please Log in or Create an account to join the conversation.

cant start iscsi-ha 3 years 9 months ago #2077

Salvatore Costantino
Offline
Posts: 722

Yes. That would be easy to do. The validation is handled inside the init script for iscsi-ha. If you edit /etc/init.d/iscsi-ha, look for the following code block and add a hash (#) in front of the &&. I would consider this only a temporary solution until we have a chance to see what's changed in 8.2

start() {
        ##############################
        ## Ensure mandatory services
        ## are running before start
        ##############################
        xapi_init_check [color=red]#[/color]&& fw_init_check
        RETVAL=$?
        if [ $RETVAL -ne 0 ]
        then
                failure $"XAPI and firewall are required to start"
                echo $"XAPI and firewall are required to start"
                exit 1
        fi

Please Log in or Create an account to join the conversation.

Page:
1
2

Forum

Main Forum

Suggestions and Feedback

cant start iscsi-ha