[pve-devel] proxmox 1.8 : ERROR: Ticket authentication failed

Alexandre DERUMIER aderumier at odiso.com
Wed Jul 13 07:38:53 CEST 2011 

/etc/pve/master/pve-root-ca.key not ok
/etc/pve/pve-root-ca.srl not ok

/etc/pve/master/pve-root-ca.key is ok. 
/etc/pve/master/pve-root-ca.srl is ok
/etc/pve/master/cluster.cfg is ok
/etc/pve/master/storage.cfg is ok
/etc/pve/storage.cfg is ok
/etc/pve/cluster.cfg is ok


maybe it's when adding member to cluster,the /etc/pve/master/pve-root-ca.key is not copied to /etc/pve/pve-root-ca.key ...

	














----- Mail original -----

De: "Alexandre DERUMIER" <aderumier at odiso.com> 
À: "Dietmar Maurer" <dietmar at proxmox.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mercredi 13 Juillet 2011 07:22:24 
Objet: Re: [pve-devel] proxmox 1.8 : ERROR: Ticket authentication failed 

Hi Dietmar, 

you are right, they don't match 



kvm1: a19f31e1e8c686dc7e09a0b2bcd5647e /etc/pve/pve-root-ca.key 
kvm2: a19f31e1e8c686dc7e09a0b2bcd5647e /etc/pve/pve-root-ca.key 
kvm3 a19f31e1e8c686dc7e09a0b2bcd5647e /etc/pve/pve-root-ca.key 

kvm4: 8b51c698da746a4d72ccd2845270119e /etc/pve/pve-root-ca.key 
kvm5: 60cc99c0b94bec8f3c15ff5febc277a0 /etc/pve/pve-root-ca.key 


when is this key generated ? 

can i simply copy the key from master to slaves ? 













Alexandre Derumier Ingénieur système e-mail : aderumier at odiso.com Tél : +33 (0)3 20 68 88 90 Fax : +33 (0)3 20 68 90 81 45 Bvd du Général Leclerc 59100 ROUBAIX - FRANCE ----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mercredi 13 Juillet 2011 06:42:37 
Objet: RE: proxmox 1.8 : ERROR: Ticket authentication failed 

Does the certificates match? 

# md5sum /etc/pve/pve-root-ca.key 

- DIetmar 

> -----Original Message----- 
> From: Alexandre DERUMIER [mailto:aderumier at odiso.com] 
> Sent: Dienstag, 12. Juli 2011 12:24 
> To: Dietmar Maurer 
> Cc: pve-devel at pve.proxmox.com 
> Subject: proxmox 1.8 : ERROR: Ticket authentication failed 
> 
> Hi, 
> 
> i have a problem with 2 new proxmox servers in my cluster. 
> 
> on my master (kvm1): 
> ------------- 
> pveca -l 
> 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M S 74 days 16:39 1773.49 68% 12% 
> 6 : 10.3.94.38 N S 41 days 21:31 2.22 80% 13% 
> 8 : 10.3.94.50 N S 49 days 02:30 1.46 76% 11% 
> 10 : 10.3.94.52 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466219::2acfe434e698e6603a8983245eb04404efcb3399' 
> 
> 11 : 10.3.94.51 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466219::2acfe434e698e6603a8983245eb04404efcb3399' 
> 
> 
> on my first new slave (kvm4) 
> ----------------------- 
> pveca -l 
> 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 6 : 10.3.94.38 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 8 : 10.3.94.50 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 10 : 10.3.94.52 N S 01:13 0.35 4% 6% 
> 11 : 10.3.94.51 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 
> on my first new second slave (kvm4) 
> ----------------------- 
> kvm4:~# pveca -l 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 6 : 10.3.94.38 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 8 : 10.3.94.50 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 10 : 10.3.94.52 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 11 : 10.3.94.51 N S 01:59 0.00 4% 1% 
> 
> 
> 
> - date/time are same with ntp 
> - ssh is ok between nodes 
> - version of package are the same 
> 
> 
> i'd check in the code, it's failing in Utils.pm in verify_ticket sub on 
> 
> Digest::SHA1::sha1_hex($username, $group, $time, $secret) eq $mac 
> 
> 
> I had try to calculate the digest, and it's not same than $mac .. 
> 
> Could you help me ? 
> 
> Best Regards, 
> 
> Alexandre 
> 
_______________________________________________ 
pve-devel mailing list 
pve-devel at pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel 

Hi Dietmar, 

you are right, they don't match 



kvm1: a19f31e1e8c686dc7e09a0b2bcd5647e /etc/pve/pve-root-ca.key 
kvm2: a19f31e1e8c686dc7e09a0b2bcd5647e /etc/pve/pve-root-ca.key 
kvm3 a19f31e1e8c686dc7e09a0b2bcd5647e /etc/pve/pve-root-ca.key 

kvm4: 8b51c698da746a4d72ccd2845270119e /etc/pve/pve-root-ca.key 
kvm5: 60cc99c0b94bec8f3c15ff5febc277a0 /etc/pve/pve-root-ca.key 


when is this key generated ? 

can i simply copy the key from master to slaves ? 













----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mercredi 13 Juillet 2011 06:42:37 
Objet: RE: proxmox 1.8 : ERROR: Ticket authentication failed 

Does the certificates match? 

# md5sum /etc/pve/pve-root-ca.key 

- DIetmar 

> -----Original Message----- 
> From: Alexandre DERUMIER [mailto:aderumier at odiso.com] 
> Sent: Dienstag, 12. Juli 2011 12:24 
> To: Dietmar Maurer 
> Cc: pve-devel at pve.proxmox.com 
> Subject: proxmox 1.8 : ERROR: Ticket authentication failed 
> 
> Hi, 
> 
> i have a problem with 2 new proxmox servers in my cluster. 
> 
> on my master (kvm1): 
> ------------- 
> pveca -l 
> 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M S 74 days 16:39 1773.49 68% 12% 
> 6 : 10.3.94.38 N S 41 days 21:31 2.22 80% 13% 
> 8 : 10.3.94.50 N S 49 days 02:30 1.46 76% 11% 
> 10 : 10.3.94.52 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466219::2acfe434e698e6603a8983245eb04404efcb3399' 
> 
> 11 : 10.3.94.51 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466219::2acfe434e698e6603a8983245eb04404efcb3399' 
> 
> 
> on my first new slave (kvm4) 
> ----------------------- 
> pveca -l 
> 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 6 : 10.3.94.38 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 8 : 10.3.94.50 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 10 : 10.3.94.52 N S 01:13 0.35 4% 6% 
> 11 : 10.3.94.51 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466864::9c1d9f0f19300dd4f11d435c0a20d494e469e09d' 
> 
> 
> on my first new second slave (kvm4) 
> ----------------------- 
> kvm4:~# pveca -l 
> CID----IPADDRESS----ROLE-STATE--------UPTIME---LOAD----MEM---DISK 
> 5 : 10.3.94.49 M ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 6 : 10.3.94.38 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 8 : 10.3.94.50 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 10 : 10.3.94.52 N ERROR: Ticket authentication failed - invalid ticket 
> 'root::root::1310466909::4ba1d308cd0dfff90e986a91b94c143773ca1e54' 
> 
> 11 : 10.3.94.51 N S 01:59 0.00 4% 1% 
> 
> 
> 
> - date/time are same with ntp 
> - ssh is ok between nodes 
> - version of package are the same 
> 
> 
> i'd check in the code, it's failing in Utils.pm in verify_ticket sub on 
> 
> Digest::SHA1::sha1_hex($username, $group, $time, $secret) eq $mac 
> 
> 
> I had try to calculate the digest, and it's not same than $mac .. 
> 
> Could you help me ? 
> 
> Best Regards, 
> 
> Alexandre 
> 
_______________________________________________ 
pve-devel mailing list 
pve-devel at pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

More information about the pve-devel mailing list