<html><body><p>It could be "easy" in the end, e.g. regenerating the key ("mmauth genkey new") may fix the issue. Figuring out exactly what is going wrong is messy though, and requires looking at a number of debug data points, something that's awkward to do on a public mailing list. I don't think you want to post certificates et al on a mailing list. The PMR channel is more appropriate for this kind of thing.<br><br>yuri<br><br><img width="16" height="16" src="cid:1__=07BB0ABADFC9C60B8f9e8a93df938690918c07B@" border="0" alt="Inactive hide details for "Simon Thompson (Research Computing - IT Services)" ---09/09/2016 07:37:52 AM---That’s sorta what I "><font color="#424282">"Simon Thompson (Research Computing - IT Services)" ---09/09/2016 07:37:52 AM---That’s sorta what I was expecting. Though I was hoping someone might have said 'oh just run mmchconf</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">"Simon Thompson (Research Computing - IT Services)" <S.J.Thompson@bham.ac.uk></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org>, </font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">09/09/2016 07:37 AM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">Re: [gpfsug-discuss] Remote cluster mount failing</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><font face="Calibri">That’s sorta what I was expecting. Though I was hoping someone might have said 'oh just run mmchconfig ....' or something easy.</font><br><br><font face="Calibri">PMR on its way in.</font><br><br><font face="Calibri">Thanks!</font><br><br><font face="Calibri">Simon</font><br><br><b><font face="Calibri">From: </font></b><font face="Calibri"><</font><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss-bounces@spectrumscale.org</font></u></a><font face="Calibri">> on behalf of Yuri L Volobuev <</font><a href="mailto:volobuev@us.ibm.com"><u><font color="#0000FF" face="Calibri">volobuev@us.ibm.com</font></u></a><font face="Calibri">></font><b><font face="Calibri"><br>Reply-To: </font></b><font face="Calibri">"</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss@spectrumscale.org</font></u></a><font face="Calibri">" <</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss@spectrumscale.org</font></u></a><font face="Calibri">></font><b><font face="Calibri"><br>Date: </font></b><font face="Calibri">Wednesday, 7 September 2016 at 17:58</font><b><font face="Calibri"><br>To: </font></b><font face="Calibri">"</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss@spectrumscale.org</font></u></a><font face="Calibri">" <</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss@spectrumscale.org</font></u></a><font face="Calibri">></font><b><font face="Calibri"><br>Subject: </font></b><font face="Calibri">Re: [gpfsug-discuss] Remote cluster mount failing</font><br>
<p><font face="Calibri">It's unclear what's wrong. I'd have two main suspects: (1) TLS protocol version confusion, due to a difference in GSKit version and/or configuration (e.g. NIST SP800 compliance) on two sides (2) firewall. TLS issues are usually messy and tedious to work though. I'd recommend opening a PMR to facilitate debug data collection and analysis. A lot of gory detail may be needed to figure out what's going on.<br><br>yuri<br><br></font><img src="cid:1__=07BB0ABADFC9C60B8f9e8a93df938690918c07B@" width="16" height="16" alt="Inactive hide details for "Simon Thompson (Research Computing - IT Services)" ---09/07/2016 05:37:11 AM---Hi All, I'm trying to"><font color="#424282" face="Calibri">"Simon Thompson (Research Computing - IT Services)" ---09/07/2016 05:37:11 AM---Hi All, I'm trying to get some multi cluster thing working between two of our GPFS</font><font face="Calibri"><br></font><font color="#5F5F5F" face="Calibri"><br>From: </font><font face="Calibri">"Simon Thompson (Research Computing - IT Services)" <</font><a href="mailto:S.J.Thompson@bham.ac.uk"><u><font color="#0000FF" face="Calibri">S.J.Thompson@bham.ac.uk</font></u></a><font face="Calibri">></font><font color="#5F5F5F" face="Calibri"><br>To: </font><font face="Calibri">"</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss@spectrumscale.org</font></u></a><font face="Calibri">" <</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss@spectrumscale.org</font></u></a><font face="Calibri">>, </font><font color="#5F5F5F" face="Calibri"><br>Date: </font><font face="Calibri">09/07/2016 05:37 AM</font><font color="#5F5F5F" face="Calibri"><br>Subject: </font><font face="Calibri">[gpfsug-discuss] Remote cluster mount failing</font><font color="#5F5F5F" face="Calibri"><br>Sent by: </font><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><u><font color="#0000FF" face="Calibri">gpfsug-discuss-bounces@spectrumscale.org</font></u></a><p><hr width="100%" size="2" align="left" noshade><font face="Calibri"><br><br><br>Hi All,<br><br>I'm trying to get some multi cluster thing working between two of our GPFS<br>clusters.<br><br>In the "client" cluster, when trying to mount the "remote" cluster, I get:<br><br># mmmount gpfs<br>Wed 7 Sep 13:33:06 BST 2016: mmmount: Mounting file systems ...<br>mount: mount /dev/gpfs on /gpfs failed: Connection timed out<br>mmmount: Command failed. Examine previous error messages to determine<br>cause.<br><br><br>And in the log file:<br>Wed Sep 7 13:33:07.481 2016: [N] The client side TLS handshake with node<br>10.0.0.182 was cancelled: connection reset by peer (return code 420).<br>Wed Sep 7 13:33:07.486 2016: [N] The client side TLS handshake with node<br>10.0.0.181 was cancelled: connection reset by peer (return code 420).<br>Wed Sep 7 13:33:07.487 2016: [E] Failed to join remote cluster<br>GPFS_STORAGE.CLUSTER<br>Wed Sep 7 13:33:07.488 2016: [W] Command: err 78: mount<br>GPFS_STORAGE.CLUSTER:gpfs<br>Wed Sep 7 13:33:07.489 2016: Connection timed out<br><br>In the remote cluster, I see:<br><br>Wed Sep 7 13:33:07.487 2016: [W] The TLS handshake with node 10.0.0.222<br>failed with error 447 (server side).<br>Wed Sep 7 13:33:07.488 2016: [X] Connection from 10.10.0.35 <c0p174><br>refused, authentication failed<br>Wed Sep 7 13:33:07.489 2016: [E] Killing connection from 10.10.0.35, err<br>703<br>Wed Sep 7 13:33:07.490 2016: Operation not permitted<br><br><br><br>Weirdly though on other nodes in the client cluster this succeeds fine and<br>can mount, so I think I got all the bits in the mmauth and mmremotecluster<br>configured correctly.<br><br>Any suggestions?<br><br>Thanks<br><br>Simon<br><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</font><u><font color="#0000FF" face="Calibri"><br></font></u><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><u><font color="#0000FF" face="Calibri">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></u></a><font face="Calibri"><br><br><br></font><tt>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></tt><tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></tt><tt><br></tt><br>[attachment "graycol.gif" deleted by Yuri L Volobuev/Austin/IBM] <br><BR>
</body></html>