<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>That’s sorta what I was expecting. Though I was hoping someone might have said 'oh just run mmchconfig ....' or something easy.</div>
<div><br>
</div>
<div>PMR on its way in.</div>
<div><br>
</div>
<div>Thanks!</div>
<div><br>
</div>
<div>Simon</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><<a href="mailto:gpfsug-discuss-bounces@spectrumscale.org">gpfsug-discuss-bounces@spectrumscale.org</a>> on behalf of Yuri L Volobuev <<a href="mailto:volobuev@us.ibm.com">volobuev@us.ibm.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>" <<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, 7 September 2016 at 17:58<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>" <<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [gpfsug-discuss] Remote cluster mount failing<br>
</div>
<div><br>
</div>
<div>
<div>
<p>It's unclear what's wrong. I'd have two main suspects: (1) TLS protocol version confusion, due to a difference in GSKit version and/or configuration (e.g. NIST SP800 compliance) on two sides (2) firewall. TLS issues are usually messy and tedious to work
though. I'd recommend opening a PMR to facilitate debug data collection and analysis. A lot of gory detail may be needed to figure out what's going on.<br>
<br>
yuri<br>
<br>
<img width="16" height="16" src="cid:1__=07BB0AB4DFCF47C28f9e8a93df938690918c07B@" border="0" alt="Inactive hide details for "Simon Thompson (Research Computing - IT Services)" ---09/07/2016 05:37:11 AM---Hi All, I'm trying to"><font color="#424282">"Simon
Thompson (Research Computing - IT Services)" ---09/07/2016 05:37:11 AM---Hi All, I'm trying to get some multi cluster thing working between two of our GPFS</font><br>
<br>
<font size="2" color="#5F5F5F">From: </font><font size="2">"Simon Thompson (Research Computing - IT Services)" <<a href="mailto:S.J.Thompson@bham.ac.uk">S.J.Thompson@bham.ac.uk</a>></font><br>
<font size="2" color="#5F5F5F">To: </font><font size="2">"<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>" <<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>>,
</font><br>
<font size="2" color="#5F5F5F">Date: </font><font size="2">09/07/2016 05:37 AM</font><br>
<font size="2" color="#5F5F5F">Subject: </font><font size="2">[gpfsug-discuss] Remote cluster mount failing</font><br>
<font size="2" color="#5F5F5F">Sent by: </font><font size="2"><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org">gpfsug-discuss-bounces@spectrumscale.org</a></font><br>
</p>
<hr width="100%" size="2" align="left" noshade="" style="color:#8091A5; ">
<br>
<br>
<br>
<tt>Hi All,<br>
<br>
I'm trying to get some multi cluster thing working between two of our GPFS<br>
clusters.<br>
<br>
In the "client" cluster, when trying to mount the "remote" cluster, I get:<br>
<br>
# mmmount gpfs<br>
Wed 7 Sep 13:33:06 BST 2016: mmmount: Mounting file systems ...<br>
mount: mount /dev/gpfs on /gpfs failed: Connection timed out<br>
mmmount: Command failed. Examine previous error messages to determine<br>
cause.<br>
<br>
<br>
And in the log file:<br>
Wed Sep 7 13:33:07.481 2016: [N] The client side TLS handshake with node<br>
10.0.0.182 was cancelled: connection reset by peer (return code 420).<br>
Wed Sep 7 13:33:07.486 2016: [N] The client side TLS handshake with node<br>
10.0.0.181 was cancelled: connection reset by peer (return code 420).<br>
Wed Sep 7 13:33:07.487 2016: [E] Failed to join remote cluster<br>
GPFS_STORAGE.CLUSTER<br>
Wed Sep 7 13:33:07.488 2016: [W] Command: err 78: mount<br>
GPFS_STORAGE.CLUSTER:gpfs<br>
Wed Sep 7 13:33:07.489 2016: Connection timed out<br>
<br>
In the remote cluster, I see:<br>
<br>
Wed Sep 7 13:33:07.487 2016: [W] The TLS handshake with node 10.0.0.222<br>
failed with error 447 (server side).<br>
Wed Sep 7 13:33:07.488 2016: [X] Connection from 10.10.0.35 <c0p174><br>
refused, authentication failed<br>
Wed Sep 7 13:33:07.489 2016: [E] Killing connection from 10.10.0.35, err<br>
703<br>
Wed Sep 7 13:33:07.490 2016: Operation not permitted<br>
<br>
<br>
<br>
Weirdly though on other nodes in the client cluster this succeeds fine and<br>
can mount, so I think I got all the bits in the mmauth and mmremotecluster<br>
configured correctly.<br>
<br>
Any suggestions?<br>
<br>
Thanks<br>
<br>
Simon<br>
<br>
_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org<br>
</tt><tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></tt><tt><br>
<br>
</tt><br>
<br>
</div>
</div>
</span>
</body>
</html>