Hmm, OK. After looking at things again, it looks like the actual problem is that 'linstor create' without -p sets the port to 3377 for the Satellite:

# linstor node create --communication-type SSL vms20 --node-type Combined
SUCCESS:
Description:
    New node 'vms20' registered.
Details:
    Node 'vms20' UUID is: af9198db-512a-4cf3-ad31-a1e79d416596
ERROR:
Description:
    (Node: 'vms20') The requested function call cannot be executed.
Cause:
    Common causes of this error are:
       - The function call name specified by the caller
         (client side) is incorrect
       - The requested function call was not loaded into
         the system (server side)
Details:
    The requested function call name was 'Auth'.
    Node: vms20
Show reports:
    linstor error-reports show 5EFDF10B-00000-000001
root@vms20:~# linstor n l
╭─────────────────────────────────────────────────────────╮
┊ Node  ┊ NodeType ┊ Addresses                  ┊ State   ┊
╞═════════════════════════════════════════════════════════╡
┊ vms20 ┊ COMBINED ┊ 128.104.164.119:3377 (SSL) ┊ OFFLINE ┊
╰─────────────────────────────────────────────────────────╯


# with -p 3367:

# linstor node create -p 3367 --communication-type SSL vms20 --node-type Combined
SUCCESS:
Description:
    New node 'vms20' registered.
Details:
    Node 'vms20' UUID is: f5887821-3415-48bc-8d33-1cc4ac19efe3
SUCCESS:
Description:
    Node 'vms20' authenticated
Details:
Supported storage providers: [diskless, lvm, lvm_thin, file, file_thin, openflex_target]
    Supported resource layers  : [writecache, cache, openflex, storage]
    Unsupported storage providers:
        ZFS: 'cat /sys/module/zfs/version' returned with exit code 1
        ZFS_THIN: 'cat /sys/module/zfs/version' returned with exit code 1
SPDK: IO exception occured when running 'rpc.py get_spdk_version': Cannot run program "rpc.py": error=2, No such file or directory

    Unsupported resource layers:
        DRBD: DRBD version has to be >= 9. Current DRBD version: 8.4.10
LUKS: IO exception occured when running 'cryptsetup --version': Cannot run program "cryptsetup": error=2, No such file or directory NVME: IO exception occured when running 'nvme version': Cannot run program "nvme": error=2, No such file or directory
INFO:
Linstor node name 'vms20' and hostname 'vms20.physics.wisc.edu' doesn't match.
root@vms20:~# systemctl start linstor-satellite.service ^C
root@vms20:~# linstor n l
╭────────────────────────────────────────────────────────╮
┊ Node  ┊ NodeType ┊ Addresses                  ┊ State  ┊
╞════════════════════════════════════════════════════════╡
┊ vms20 ┊ COMBINED ┊ 128.104.164.119:3367 (SSL) ┊ Online ┊
╰────────────────────────────────────────────────────────╯

Thanks!
Chad.


On 7/2/20 5:00 AM, [email protected] wrote:
Send drbd-user mailing list submissions to
        [email protected]

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.linbit.com/mailman/listinfo/drbd-user
or, via email, send a message with subject or body 'help' to
        [email protected]

You can reach the person managing the list at
        [email protected]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of drbd-user digest..."


Today's Topics:

    1. Re: satellite daemon must non-3377 port for SSL? (Rene Peinthor)


----------------------------------------------------------------------

Message: 1
Date: Thu, 2 Jul 2020 07:10:10 +0200
From: Rene Peinthor <[email protected]>
Subject: Re: [DRBD-user] satellite daemon must non-3377 port for SSL?
To: Chad William Seys <[email protected]>
Cc: drbd-user <[email protected]>
Message-ID:
        <CAHmn2DPLAKteM=3veZbri3-NtWUkg-0vQt=bhq36cir2ydz...@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Hi!

I don't know why you think that the satellite listens on port 3377?
Here are the default port bindings:

     /*
      * Default ports
      */
     public static final int DFLT_CTRL_PORT_SSL = 3377;
     public static final int DFLT_CTRL_PORT_PLAIN = 3376;
     public static final int DFLT_STLT_PORT_SSL = 3367;
     public static final int DFLT_STLT_PORT_PLAIN = 3366;

It wouldn't make much sense to have a combined node, where you only can run
either a controller or satellite...
We have multiple setups where Controller and Satellite run on the same node.

Best regards
Rene

On Thu, Jul 2, 2020 at 7:02 AM Chad William Seys <[email protected]>
wrote:

Hi,
    I have a "Combined" controller/satellite node which I'm trying to set
up SSL on.
    It appears that the controller binds port 3377 by default.  This is
also the port the satellite listens to by default.  When the node is
Combined, this causes problems connecting to the satellite daemon.
    My hope was to have the controller bind to a non-3377 port so that
one would not have to specify a non-default port when creating a node.
However, I haven't been able to get the controller daemon to bind to
anything but 3377.
E.g. This does not work:
# cat /etc/linstor/linstor_controller.toml
[netcom]
    type="ssl"
    port=3388
    server_certificate="/etc/linstor/ssl/keystore.jks"
    trusted_certificates="/etc/linstor/ssl/certificates.jks"
    key_password="linstor"
    keystore_password="linstor"
    truststore_password="linstor"
    ssl_protocol="TLSv1.2"


Thanks!
Chad.
_______________________________________________
Star us on GITHUB: https://github.com/LINBIT
drbd-user mailing list
[email protected]
https://lists.linbit.com/mailman/listinfo/drbd-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
<http://lists.linbit.com/pipermail/drbd-user/attachments/20200702/2157c8ef/attachment.html>

------------------------------

_______________________________________________
Star us on GITHUB: https://github.com/LINBIT
drbd-user mailing list
[email protected]
https://lists.linbit.com/mailman/listinfo/drbd-user


End of drbd-user Digest, Vol 192, Issue 2
*****************************************

_______________________________________________
Star us on GITHUB: https://github.com/LINBIT
drbd-user mailing list
[email protected]
https://lists.linbit.com/mailman/listinfo/drbd-user

Reply via email to