VCS ERROR V-16-1-11332 Invalid credentials, unable...

Mugur_Stef · ‎04-17-2014

Running Veritas Cluster Server 6.1 on RHEL 6.4.

Tried to run:

/opt/VRTSvcs/bin/halogin oracle oracle
VCS WARNING V-16-1-12032 Cannot create file:
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session

The user oracle was already created in cluster with the respective "oracle" password.

starflyfly · ‎04-17-2014

Hi, check following output:

1. gabconfig -a

2. hastatus -sum

3.hauser -display

4.hauser -list

starflyfly · ‎04-17-2014

also try:

6.halogin admin

starflyfly · ‎04-17-2014

Please set the env variable VCS_HOST to the localhost and then test again.



$ export VCS_HOST=hostname
$ /opt/VRTSvcs/bin/halogin admin
Password:
$ cat .vcspwd
100 hostname admin XXXXXX

Mugur_Stef · ‎04-17-2014

gabconfig -a
GAB Port Memberships
===============================================================
Port a gen   46590c membership 012
Port b gen   46590d membership 012
Port h gen   465913 membership 012

[root@zzz ~]# hastatus -sum

-- SYSTEM STATE
-- System State Frozen

A  xxx            RUNNING              0
A  yyy             RUNNING              0
A  zzz           RUNNING              0

-- GROUP STATE
-- Group System Probed AutoDisabled State

B ora_xxx         xxx            Y          N               OFFLINE
B ora_xxx         yyy             Y          N               OFFLINE
B ora_xxx         zzz           Y          N               OFFLINE
B ora_yyy        xxx            Y          N               OFFLINE
B ora_yyy         yyy             Y          N               OFFLINE
B ora_yyy         zzz           Y          N               OFFLINE
B ora_zzz         xxx            Y          N               OFFLINE
B ora_zzz         yyy             Y          N               OFFLINE
B ora_zzz         zzz           Y          N               OFFLINE
B vxfen           xxx            Y          N               ONLINE
B vxfen           yyy             Y          N               ONLINE
B vxfen           zzz           Y          N               ONLINE

-- RESOURCES NOT PROBED
-- Group Type Resource System

E ora_xxx         Netlsnr              ora_xxx_listener     xxx
E ora_xxx         Netlsnr              ora_xxx_listener     yyy
E ora_xxx         Netlsnr              ora_xxx_listener     zzz
E ora_xxx         Oracle               ora_xxx_db           xxx
E ora_xxx         Oracle               ora_xxx_db           yyy
E ora_xxx         Oracle               ora_xxx_db           zzz
E ora_xxx         Proxy                proxy_xxx            xxx
E ora_xxx         Proxy                proxy_xxx            yyy
E ora_xxx         Proxy                proxy_xxx            zzz
E ora_yyy         Netlsnr              ora_yyy_listener     xxx
E ora_yyy         Netlsnr              ora_yyy_listener     yyy
E ora_yyy         Netlsnr              ora_yyy_listener     zzz
E ora_yyy         Oracle               ora_yyy_db           xxx
E ora_yyy         Oracle               ora_yyy_db           yyy
E ora_yyy         Oracle               ora_yyy_db           zzz
E ora_yyy         Proxy                proxy_yyy            xxx
E ora_yyy         Proxy                proxy_yyy            yyy
E ora_yyy         Proxy                proxy_yyy            zzz
E ora_zzz         Netlsnr              ora_zzz_listener     xxx
E ora_zzz         Netlsnr              ora_zzz_listener     yyy
E ora_zzz         Netlsnr              ora_zzz_listener     zzz
E ora_zzz         Oracle               ora_zzz_db           xxx
E ora_zzz         Oracle               ora_zzz_db           yyy
E ora_zzz         Oracle               ora_zzz_db           zzz
E ora_zzz         Proxy                proxy_zzz            xxx
E ora_zzz         Proxy                proxy_zzz            yyy
E ora_zzz         Proxy                proxy_zzz            zzz

[root@zzz ~]# hauser -display
UserName : Privilege
--------------------
admin : ClusterAdministrator

ora_yyy : GroupAdministrator for group(s) ( ora_yyy )
GroupOperator for group(s) ( ora_yyy )

ora_xxx : GroupAdministrator for group(s) ( ora_xxx )
GroupOperator for group(s) ( ora_xxx )

ora_zzz : GroupAdministrator for group(s) ( ora_zzz )
GroupOperator for group(s) ( ora_zzz )

oracle : GroupAdministrator for group(s) ( ora_xxx )
GroupOperator for group(s) ( ora_xxx )

[root@zzz ~]# hauser -list
admin ora_yyy ora_xxx ora_zzz oracle

[root@zzz ~]# su - oracle
-sh-4.1$ /opt/VRTSvcs/bin/halogin admin
Enter Password:

VCS WARNING V-16-1-12032 Cannot create file:
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session

-sh-4.1$ /opt/VRTSvcs/bin/halogin admin password
VCS WARNING V-16-1-52529 Login Incorrect, Invalid username/password
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session

Mugur_Stef · ‎04-17-2014

-sh-4.1$ export VCS_host=zzz
-sh-4.1$ /opt/VRTSvcs/bin/halogin admin
Enter Password:

VCS WARNING V-16-1-12032 Cannot create file:
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session
-sh-4.1$
-sh-4.1$ ls -la
total 36
drwxr-xr-x 3 oracle dba 4096 Apr 17 11:49 .
drwxr-xr-x. 8 root   root 4096 Apr 17 11:42 ..
-rw------- 1 oracle dba    96 Apr 17 12:14 .bash_history
-rw-r--r-- 1 oracle dba    18 Aug 29 2012 .bash_logout
-rw-r--r-- 1 oracle dba   176 Aug 29 2012 .bash_profile
-rw-r--r-- 1 oracle dba   124 Aug 29 2012 .bashrc
-rw-r--r-- 1 oracle dba   121 Nov 1 2012 .kshrc
-rw-r--r-- 1 oracle dba   124 Jun 28 2011 .mkshrc
drwx------ 2 oracle dba 4096 Apr 17 11:49 .ssh

Mugur_Stef · ‎04-17-2014

Please see the attachment.

Thanks

mikebounds · ‎04-17-2014

Check if there is a

.vcspwd

file in Oracle user home directory (user home as in /etc/passwd, not $ORACLE_HOME) and if it exists check the ownership - if it is owned by root, then changed to be owned by oracle or delete file so it gets recreated.

You could also try just running a command (like hasys -display) without runnign halogin to see if this works.

Mike

Mugur_Stef · ‎04-17-2014

There is no .vcspwd file in oracle user home directory.

[ora_xxx@zzz ~]$ /opt/VRTSvcs/bin/hasys -display
VCS NOTICE V-16-1-52563 VCS Login:ora_xxx
Enter Password:

#System    Attribute             Value
xxx AgentsStopped         0
xxx AvailableCapacity     CPU    39.60   Mem     254822.00       Swap    16383.00
xxx CPUThresholdLevel     Critical       90      Warning 80      Note    70      Info    60
xxx CPUUsage              0
xxx CPUUsageMonitoring    Enabled        0       ActionThreshold 0       ActionTimeLimit 0       Action     NONE    NotifyThreshold 0       NotifyTimeLimit 0
xxx Capacity              CPU    40.00   Mem     258439.00       Swap    16383.00
xxx ConfigBlockCount      315
xxx ConfigCheckSum        42231
xxx ConfigDiskState       CURRENT

......

It gives me all the configuration info once I give it the user and the proper password.

It seems that .vcspwd file is not created.

Gaurav_S · ‎04-17-2014

By any chance you have linux containers running ?

Also do you have any working host or this is the only host with a problem ?

for the user which is logging in correctly, there is no ./vcspwd ? is there a .vcshost file in /etc/VRTSvcs ?

G

Mugur_Stef · ‎04-17-2014

There are no linux containers running. It's the same behaviour for 3 different users on all 3 hosts from the cluster.

We do have other Veritas clusters but not 6.1 and not on RHEL 6.4 and until now we didn't have any problem with halogin.

There is no .vcshost file in /etc/VRTSvcs

Mugur_Stef · ‎04-17-2014

These are all the VRTS packets installed:

[root@zzz ~]# rpm -qa | grep -i vrts
VRTSvxvm-6.1.0.000-GA_RHEL6.x86_64
VRTSvxfs-6.1.0.000-GA_RHEL6.x86_64
VRTSgab-6.1.0.000-GA_RHEL6.x86_64
VRTScps-6.1.0.000-GA_RHEL6.x86_64
VRTSdbed-6.1.0.000-GA_RHEL.x86_64
VRTSvcswiz-6.1.0.000-GA_RHEL6.i686
VRTSperl-5.16.1.6-RHEL6.1.x86_64
VRTSspt-6.1.0.000-GA.noarch
VRTSaslapm-6.1.0.000-GA_RHEL6.x86_64
VRTSlvmconv-6.1.0.000-GA_RHEL6.i686
VRTSfsadv-6.1.0.000-GA_RHEL6.x86_64
VRTSvxfen-6.1.0.000-GA_RHEL6.x86_64
VRTSvcs-6.1.0.000-GA_RHEL6.i686
VRTSvcsag-6.1.0.000-GA_RHEL6.i686
VRTSvcsea-6.1.0.000-GA_RHEL6.i686
VRTSodm-6.1.0.000-GA_RHEL6.x86_64
VRTSvbs-6.1.0.000-GA_Linux.i686
VRTSsfcpi61-6.1.0.000-GA_GENERIC.noarch
VRTSvlic-3.02.61.010-0.x86_64
VRTSob-3.4.678-0.i686
VRTSfssdk-6.1.0.000-GA_RHEL6.x86_64
VRTSamf-6.1.0.000-GA_RHEL6.x86_64
VRTSvcsdr-6.1.0.000-GA_RHEL6.x86_64
VRTSsfmh-6.0.0.0-0.x86_64
VRTSllt-6.1.0.100-GA_RHEL6.x86_64

mikebounds · ‎04-17-2014

If you run a command as not root then password is promped for, but it is not saved so .vcspwd is not created. If you run halogin then .vcspwd is created, but you get error "Cannot create file:", so probably halogin cannot create .vcspwd file so if this does not exist then check oracle can write to its own home directory so as oracle try:

touch ~/.vcspwd

If this fails, then you need to sort out permissions so oracle can write to home directory.

Mike

starflyfly · ‎04-17-2014

I also think your current user don't have permisson to create files.

so check:

1. id

2.pwd

3. touch ~/.vcspwd

4. ls -l ~/.vcspwd

5.try again, if error still.

Mugur_Stef · ‎04-17-2014

-sh-4.1$ id
uid=35010(oracle) gid=35050(dba) groups=35050(dba)
-sh-4.1$ pwd
/home/oracle
-sh-4.1$ touch ~/.vcspwd
-sh-4.1$ ls -l ~/.vcspwd
-rw-r--r-- 1 oracle dba 0 Apr 18 08:41 /home/oracle/.vcspwd
-sh-4.1$ /opt/VRTSvcs/bin/halogin oracle oracle
VCS WARNING V-16-1-12032 Cannot create file:
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session

If I use a wrong password there is another error:

-sh-4.1$ /opt/VRTSvcs/bin/halogin oracle password
VCS WARNING V-16-1-52529 Login Incorrect, Invalid username/password
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session

-sh-4.1$ pwd
/home/oracle
-sh-4.1$ ls -la
total 36
drwxr-xr-x 3 oracle dba 4096 Apr 18 08:41 .
drwxr-xr-x. 8 root   root 4096 Apr 17 11:42 ..
-rw------- 1 oracle dba   242 Apr 17 15:52 .bash_history
-rw-r--r-- 1 oracle dba    18 Aug 29 2012 .bash_logout
-rw-r--r-- 1 oracle dba   176 Aug 29 2012 .bash_profile
-rw-r--r-- 1 oracle dba   124 Aug 29 2012 .bashrc
-rw-r--r-- 1 oracle dba   121 Nov 1 2012 .kshrc
-rw-r--r-- 1 oracle dba   124 Jun 28 2011 .mkshrc
drwx------ 2 oracle dba 4096 Apr 17 11:49 .ssh
-rw-r--r-- 1 oracle dba     0 Apr 18 08:41 .vcspwd

starflyfly · ‎04-18-2014

HI,

let's see what's in .vcspwd

more ~/.vcspwd

also , if possible, could you try su - root , and test again?

starflyfly · ‎04-18-2014

also check main.cf:

cat /etc/VRTSvcs/conf/config /main.cf

starflyfly · ‎04-18-2014

check what's information in vcs log:

tail -1000 /var/VRTSvcs/log/engine_A.log

Mugur_Stef · ‎04-18-2014

There is nothing in that file after I created it.

-sh-4.1$ /opt/VRTSvcs/bin/halogin oracle oracle
VCS WARNING V-16-1-12032 Cannot create file:
VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session
-sh-4.1$
-sh-4.1$ ls -la
total 40
drwxr-xr-x 3 oracle dba 4096 Apr 18 09:29 .
drwxr-xr-x. 8 root   root 4096 Apr 17 11:42 ..
-rw------- 1 oracle dba   487 Apr 18 10:06 .bash_history
-rw-r--r-- 1 oracle dba    18 Aug 29 2012 .bash_logout
-rw-r--r-- 1 oracle dba   176 Aug 29 2012 .bash_profile
-rw-r--r-- 1 oracle dba   124 Aug 29 2012 .bashrc
-rw-r--r-- 1 oracle dba   121 Nov 1 2012 .kshrc
-rw-r--r-- 1 oracle dba   124 Jun 28 2011 .mkshrc
drwx------ 2 oracle dba 4096 Apr 18 09:29 .ssh
-rw-r--r-- 1 oracle dba     0 Apr 18 08:41 .vcspwd
-rw------- 1 oracle dba   644 Apr 18 09:29 .viminfo

-sh-4.1$ su -
Password:
[root@zzz ~]#
[root@zzz ~]# /opt/VRTSvcs/bin/halogin oracle oracle
VCS ERROR V-16-1-53004 halogin can not be run to specify an alternative profile for localhost root user

Mugur_Stef · ‎04-18-2014

Please see the attachment.

VOX

VCS ERROR V-16-1-11332 Invalid credentials, unable to create halogin session