Bug Fix Advisory conga bug fix and enhancement update

Advisory: RHBA-2008:0407-15
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2008-05-20
Last updated on: 2008-05-21
Affected Products: RHEL Clustering (v. 5 server)
OVAL: N/A

Details

Updated conga packages that fix several bugs and add enhancements are now
available.

The conga packages contain a web-based administration tool for remote
cluster and storage management.

These updated packages fix the following bugs:

* nodes were rebooted when creating a new cluster. As well, nodes were
rebooted when added to an existing cluster. Cluster nodes are no longer
unnecessarily rebooted.

* conga did not set the the "nodename" attribute for manual fencing,
resulting in manual fencing being non-functional.

* there were no time outs, causing Conga to hang with a "Please be patient
- this cluster's configuration is being modified" message. To prevent tasks
blocking all operations on the cluster or host, users are now given the
option to proceed while waiting for tasks to finish.

* the space character was not accepted for fence-device passwords in
"cluster.conf".

* clusters and storage systems were cascaded on the luci "Manage Systems
and Clusters" page, in the "Remove clusters and systems" box.

* when adding systems to an existing cluster, users had to enter the system
password multiple times.

* removing a node from a cluster did not remove the corresponding fence
device.

* if the "trust" box was not selected when adding a cluster to the luci
homebase, errors such as "* You must either trust [system-name] or remove
it." occurred.

* the luci "File System Resource Configuration" page did not reflect the
settings in "cluster.conf".

* the "details" link, which provided no extra information, has been
removed.

* "luci_admin init" asked for a user password, and if luci was running,
"luci_admin init" crashed. Now, the "luci_admin" tool checks if Conga is
running, and if it is, prints a warning, before attempting any operations.

* when Conga restarted the cluster services, cluster service init scripts
were enabled, even if they were disabled.

* the cluster restart operation was not handled correctly, causing nodes
to stop, services to fail, or get stuck in a loop.

* when adding a new instance for a node that uses dual power fencing,
Conga failed to produce the correct fencing configuration.

* conga used the FQDN, instead of the node name in "cluster.conf", causing
"fence_node" to fail if a mismatch occurred.

* probing storage using luci and the Mozilla Firefox 2 Web browser, on
Microsoft Windows XP, appeared to never finish, when in fact it had.

* when configuring an IP address resource, it was not possible to enter a
FQDN. Now, only IP addresses are allowed.

As well, these updated packages add the following enhancements:

* the graphical view is now the default view for partition tables.

* users can now set the "__independent_subtree" attribute for portions of
cluster services, allowing resources and their dependencies to be
restarted, instead of the whole service.

* clearer instructions are now given when accessing Conga, prior to
running "luci_admin init" to initialize the environment.

* the "self_fence" attribute can now be set for clusterfs cluster
resources.

* the Conga web interface now supports Microsoft Internet Explorer, and
Mozilla Firefox, running on Microsoft Windows XP and Microsoft Windows
Vista clients.

* a Sybase failover resource agent has been added.

* users can now configure whether a service will be failed-back or not.

* users can now choose between "live" and "paused" migrations for virtual
machines. The default migration policy is now "live".

* the luci minimum password length has been increased to 6 characters.

* users are now automatically logged out after 10 minutes of inactivity.

* when clustered storage packages are installed, the lvm2-cluster and GFS
packages are also installed.

Users of conga are advised to upgrade to these updated packages, which
resolve these issues and add these enhancements.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

RHEL Clustering (v. 5 server)

SRPMS:
conga-0.12.0-7.el5.src.rpm     1d83f67287ccca66594bad5b10ecaea9
 
IA-32:
luci-0.12.0-7.el5.i386.rpm     99ce9760b004ed80ac985abb9a3eb7d8
ricci-0.12.0-7.el5.i386.rpm     a723dac1161f83013fc140ef6d865aa4
 
IA-64:
luci-0.12.0-7.el5.ia64.rpm     807f921214293e36db3b79dfa4cba3f5
ricci-0.12.0-7.el5.ia64.rpm     3ca099ac32e76bc9cfa917c9e3e8ee34
 
PPC:
luci-0.12.0-7.el5.ppc.rpm     c1aadcfb1c286340e5bf0721b4114391
ricci-0.12.0-7.el5.ppc.rpm     4b280ce720d9e374b13ceb4b1de1eea1
 
x86_64:
luci-0.12.0-7.el5.x86_64.rpm     66b565b78e18497bd82c86d5142f81b4
ricci-0.12.0-7.el5.x86_64.rpm     494fe7cb6e9d3bcd148ba52f87700249
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

230462 - RFE: Only reboot installation target machines when needed
238655 - conga does not set the "nodename" attribute for manual fencing
239387 - RFE: add timeouts for actions that can leave cluster unreachable
249097 - allow a space as a valid password char
249619 - luci "Manage Systems and Clusters" display of clusters and storage systems is cascaded
252348 - RFE: should only have to enter a system's password once
253223 - When deleting a node from conga, the fence device isn't deleted
253720 - "trust" box shouldn't be an option if it is required
253727 - RFE: graphical view should be default in partiton tables view
253842 - luci ignores File System Resource Configuration
253879 - RFE: drop the link/details column in the resource section table
264161 - RFE: support setting the "__independent_subtree" attribute on cluster resources
277661 - RFE: Better instructions on the luci login page if luci_admin not run.
277711 - RFE: luci_admin should check that luci is running before asking for the password
295771 - RFE: add ability to set self_fence attribute for clusterfs resources
301411 - conga shouldn't turn on init scripts if the user turned them off
304931 - Rich Sybase resource agent configuration support
315631 - conga doesn't handle the cluster restart operation properly
317261 - Check for dual power fencing fails when adding new fence instances
320411 - conga should use the node name in cluster.conf and not FQDN for fencing
337041 - Add option to not fail-back service
340111 - Storage redirection after probe does not work on WinXP with FF2
358641 - Add Conga support for Oracle Resource Agent
383071 - Virtual machine configuration - add field for "migration type" xml attr = "migrate"
429151 - [RFE] Luci: increase min password length to 6 characters
429152 - [RFE] add inactivity timeout
431105 - IP Address Resource configuration: cannot enter fully qualified hostname
432533 - Do not attempt to install the cmirror package when shared storage is requested
437398 - When Luci session times out a re-login is thought to be a logout.



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/