[pve-devel] proxmox 1.8 : ERROR: Ticket authentication failed

[Alexandre DERUMIER]

Hi Dietmar, 

you are right, they don't  match


	
kvm1:  a19f31e1e8c686dc7e09a0b2bcd5647e  /etc/pve/pve-root-ca.key
kvm2:  a19f31e1e8c686dc7e09a0b2bcd5647e  /etc/pve/pve-root-ca.key
kvm3   a19f31e1e8c686dc7e09a0b2bcd5647e  /etc/pve/pve-root-ca.key

kvm4:   8b51c698da746a4d72ccd2845270119e  /etc/pve/pve-root-ca.key
kvm5: 	60cc99c0b94bec8f3c15ff5febc277a0 /etc/pve/pve-root-ca.key 


when is this key generated ?

can i simply copy the key from master to slaves ?













----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mercredi 13 Juillet 2011 06:42:37 
Objet: RE: proxmox 1.8 : ERROR: Ticket authentication failed 

Does the certificates match? 

# md5sum /etc/pve/pve-root-ca.key 

- DIetmar 

> -----Original Message----- 
> From: Alexandre DERUMIER [mailto:aderumier at odiso.com] 
> Sent: Dienstag, 12. Juli 2011 12:24 
> To: Dietmar Maurer 
> Cc: pve-devel at pve.proxmox.com 
> Subject: proxmox 1.8 : ERROR: Ticket authentication failed 
> 
> Hi, 
> 
> i have a problem with 2 new proxmox servers in my cluster. 
> 
> on my master (kvm1): 
> ------------- 
> pveca -l 
> 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M S 74 days 16:39 1773.49 68% 12% 
> 6 : 10.3.94.38 N S 41 days 21:31 2.22 80% 13% 
> 8 : 10.3.94.50 N S 49 days 02:30 1.46 76% 11% 
> 10 : 10.3.94.52 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466219::2acfe434e698e6603a8983245eb04404efcb3399' 
> 
> 11 : 10.3.94.51 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466219::2acfe434e698e6603a8983245eb04404efcb3399' 
> 
> 
> on my first new slave (kvm4) 
> ----------------------- 
> pveca -l 
> 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 6 : 10.3.94.38 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 8 : 10.3.94.50 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 10 : 10.3.94.52 N S 01:13 0.35 4% 6% 
> 11 : 10.3.94.51 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 
> on my first new second slave (kvm4) 
> ----------------------- 
> kvm4:~# pveca -l 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 6 : 10.3.94.38 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 8 : 10.3.94.50 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 10 : 10.3.94.52 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 11 : 10.3.94.51 N S 01:59 0.00 4% 1% 
> 
> 
> 
> - date/time are same with ntp 
> - ssh is ok between nodes 
> - version of package are the same 
> 
> 
> i'd check in the code, it's failing in Utils.pm in verify_ticket sub on 
> 
> Digest::SHA1::sha1_hex($username, $group, $time, $secret) eq $mac 
> 
> 
> I had try to calculate the digest, and it's not same than $mac .. 
> 
> Could you help me ? 
> 
> Best Regards, 
> 
> Alexandre 
>