<font size=2 face="sans-serif">There is a chance the problem might be
related to an upgrade from 3.5 to 4.1, or perhaps a remote mount between
versions 3.5 and 4.1. It would be useful to know details related to any
such migration and different releases when the PMR is opened.</font><br><br><font size=2 face="sans-serif">Thanks,</font><br><br><font size=2 face="sans-serif"> Felipe</font><br><br><font size=2 face="sans-serif">----<br>Felipe Knop
knop@us.ibm.com<br>GPFS Development and Security<br>IBM Systems<br>IBM Building 008<br>2455 South Rd, Poughkeepsie, NY 12601<br>(845) 433-9314 T/L 293-9314<br><br></font><br><br><br><br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">Yuri L Volobuev/Austin/IBM@IBMUS</font><br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">gpfsug main discussion
list <gpfsug-discuss@spectrumscale.org></font><br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">09/09/2016 12:30 PM</font><br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">Re: [gpfsug-discuss]
Remote cluster mount failing</font><br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr noshade><br><br><br><font size=3>It could be "easy" in the end, e.g. regenerating
the key ("mmauth genkey new") may fix the issue. Figuring out
exactly what is going wrong is messy though, and requires looking at a
number of debug data points, something that's awkward to do on a public
mailing list. I don't think you want to post certificates et al on a mailing
list. The PMR channel is more appropriate for this kind of thing.<br><br>yuri<br><br></font><img src=cid:_1_148C5030148C4C20001D04E08525802C alt="Inactive hide details for "Simon Thompson (Research Computing - IT Services)" ---09/09/2016 07:37:52 AM---That\u2019s sorta what I " style="border:0px solid;"><font size=3 color=#424282>"Simon
Thompson (Research Computing - IT Services)" ---09/09/2016 07:37:52
AM---That\u2019s sorta what I was expecting. Though I was hoping someone might
have said 'oh just run mmchconf</font><font size=3><br></font><font size=2 color=#5f5f5f><br>From: </font><font size=2>"Simon Thompson (Research Computing - IT
Services)" <S.J.Thompson@bham.ac.uk></font><font size=2 color=#5f5f5f><br>To: </font><font size=2>gpfsug main discussion list <gpfsug-discuss@spectrumscale.org>,
</font><font size=2 color=#5f5f5f><br>Date: </font><font size=2>09/09/2016 07:37 AM</font><font size=2 color=#5f5f5f><br>Subject: </font><font size=2>Re: [gpfsug-discuss] Remote cluster mount
failing</font><font size=2 color=#5f5f5f><br>Sent by: </font><font size=2>gpfsug-discuss-bounces@spectrumscale.org</font><font size=3><br></font><hr noshade><font size=3><br><br></font><font size=3 face="Calibri"><br>That\u2019s sorta what I was expecting. Though I was hoping someone might have
said 'oh just run mmchconfig ....' or something easy.</font><font size=3><br></font><font size=3 face="Calibri"><br>PMR on its way in.</font><font size=3><br></font><font size=3 face="Calibri"><br>Thanks!</font><font size=3><br></font><font size=3 face="Calibri"><br>Simon</font><font size=3><br></font><font size=3 face="Calibri"><b><br>From: </b><</font><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></font></a><font size=3 face="Calibri">>
on behalf of Yuri L Volobuev <</font><a href=mailto:volobuev@us.ibm.com><font size=3 color=blue face="Calibri"><u>volobuev@us.ibm.com</u></font></a><font size=3 face="Calibri">><b><br>Reply-To: </b>"</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size=3 face="Calibri">"
<</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size=3 face="Calibri">><b><br>Date: </b>Wednesday, 7 September 2016 at 17:58<b><br>To: </b>"</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size=3 face="Calibri">"
<</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size=3 face="Calibri">><b><br>Subject: </b>Re: [gpfsug-discuss] Remote cluster mount failing</font><p><font size=3 face="Calibri">It's unclear what's wrong. I'd have two
main suspects: (1) TLS protocol version confusion, due to a difference
in GSKit version and/or configuration (e.g. NIST SP800 compliance) on two
sides (2) firewall. TLS issues are usually messy and tedious to work though.
I'd recommend opening a PMR to facilitate debug data collection and analysis.
A lot of gory detail may be needed to figure out what's going on.<br><br>yuri<br></font><font size=3><br></font><img src=cid:_1_148C7058148C6A94001D04E08525802C alt="Inactive hide details for "Simon Thompson (Research Computing - IT Services)" ---09/07/2016 05:37:11 AM---Hi All, I'm trying to" style="border:0px solid;"><font size=3 color=#424282 face="Calibri">"Simon
Thompson (Research Computing - IT Services)" ---09/07/2016 05:37:11
AM---Hi All, I'm trying to get some multi cluster thing working between
two of our GPFS</font><font size=3 color=#5f5f5f face="Calibri"><br><br>From: </font><font size=3 face="Calibri">"Simon Thompson (Research
Computing - IT Services)" <</font><a href=mailto:S.J.Thompson@bham.ac.uk><font size=3 color=blue face="Calibri"><u>S.J.Thompson@bham.ac.uk</u></font></a><font size=3 face="Calibri">></font><font size=3 color=#5f5f5f face="Calibri"><br>To: </font><font size=3 face="Calibri">"</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size=3 face="Calibri">"
<</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size=3 face="Calibri">>,
</font><font size=3 color=#5f5f5f face="Calibri"><br>Date: </font><font size=3 face="Calibri">09/07/2016 05:37 AM</font><font size=3 color=#5f5f5f face="Calibri"><br>Subject: </font><font size=3 face="Calibri">[gpfsug-discuss] Remote cluster
mount failing</font><font size=3 color=#5f5f5f face="Calibri"><br>Sent by: </font><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><font size=3 color=blue face="Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></font></a><p><hr noshade><font size=3 face="Calibri"><br><br><br>Hi All,<br><br>I'm trying to get some multi cluster thing working between two of our GPFS<br>clusters.<br><br>In the "client" cluster, when trying to mount the "remote"
cluster, I get:<br><br># mmmount gpfs<br>Wed 7 Sep 13:33:06 BST 2016: mmmount: Mounting file systems ...<br>mount: mount /dev/gpfs on /gpfs failed: Connection timed out<br>mmmount: Command failed. Examine previous error messages to determine<br>cause.<br><br><br>And in the log file:<br>Wed Sep 7 13:33:07.481 2016: [N] The client side TLS handshake with node<br>10.0.0.182 was cancelled: connection reset by peer (return code 420).<br>Wed Sep 7 13:33:07.486 2016: [N] The client side TLS handshake with node<br>10.0.0.181 was cancelled: connection reset by peer (return code 420).<br>Wed Sep 7 13:33:07.487 2016: [E] Failed to join remote cluster<br>GPFS_STORAGE.CLUSTER<br>Wed Sep 7 13:33:07.488 2016: [W] Command: err 78: mount<br>GPFS_STORAGE.CLUSTER:gpfs<br>Wed Sep 7 13:33:07.489 2016: Connection timed out<br><br>In the remote cluster, I see:<br><br>Wed Sep 7 13:33:07.487 2016: [W] The TLS handshake with node 10.0.0.222<br>failed with error 447 (server side).<br>Wed Sep 7 13:33:07.488 2016: [X] Connection from 10.10.0.35 <c0p174><br>refused, authentication failed<br>Wed Sep 7 13:33:07.489 2016: [E] Killing connection from 10.10.0.35, err<br>703<br>Wed Sep 7 13:33:07.490 2016: Operation not permitted<br><br><br><br>Weirdly though on other nodes in the client cluster this succeeds fine
and<br>can mount, so I think I got all the bits in the mmauth and mmremotecluster<br>configured correctly.<br><br>Any suggestions?<br><br>Thanks<br><br>Simon<br><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</font><font size=3 color=blue><u><br></u></font><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><font size=3 color=blue face="Calibri"><u>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</u></font></a><font size=3 face="Calibri"><br><br></font><tt><font size=3><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</font></tt><tt><font size=3 color=blue><u><br></u></font></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><font size=3 color=blue><u>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</u></font></tt></a><font size=3><br><br>[attachment "graycol.gif" deleted by Yuri L Volobuev/Austin/IBM]
<br></font><tt><font size=2>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><font size=2>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></tt></a><tt><font size=2><br></font></tt><p><BR>