Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EOL/EOE] [NSM] Why is the 'nsm@[peer]'s password:' message being displayed on a NSM server console?

0

0

Article ID: KB23813 KB Last Updated: 18 Oct 2020Version: 3.0
Summary:
Note: A product listed in this article has either reached hardware End of Life (EOL) OR software End of Engineering (EOE).  Refer to End of Life Products & Milestones for the EOL, EOE, and End of Support (EOS) dates.
This article describes the issue of the nsm@[peer]'s password: message being displayed, during failover, on a NSM server console.
 
Symptoms:
Durng faiover, the following authentication requiring messages are generated:
[root@NSMxA errorLog]# nsm@172.27.117.66's password:
nsm@172.27.117.66's password:
nsm@172.27.117.66's password:
nsm@172.27.117.66's password:
nsm@172.27.117.66's password:
nsm@172.27.117.66's password:
However, haStatus shows that the failover is successful and db-replication is in sync.
[root@NSMxA errorLog]# /usr/netscreen/HaSvr/utils/haStatus
=======================================================
H/A process status
=======================================================
Retrieving status...
highAvail (pid 3979)...............................ON
highAvailSvr (pid 5221)............................ON
=======================================================
State of the local and peer H/A server
=======================================================
Local Server:
172.27.117.65 running network-up db-repl:in-sync
Peer Server:
172.27.117.66 standby network-up db-repl:in-sync

What is the meaning of this message and what should be checked?
Cause:
In a HA environment, the following mechanisms sync information between the primary server and secondary server are present:
 
  • The HaSvr mechanism manages XDB sync.

  • The rsync mechanism manages non-XDB (files of DevSvr and GuiSvr) sync.

This error message indicates that rsync did not work properly.

In /usr/netscreen/HaSvr/var/errorLog/ha.log, the following message are observed:
20120501153523: START doDirectHa()...
20120501153523: START haRsyncDirect()...
20120501153523: START hasGuiSvrSharedDisk()...
20120501153523: END hasGuiSvrSharedDisk()...
20120501153523: START hasDevSvrSharedDisk()...
20120501153523: END hasDevSvrSharedDisk()...
20120501153523: START hasGuiSvrData()...
20120501153523: END hasGuiSvrData()...
20120501153523: START hasDevSvrData()...
20120501153523: END hasDevSvrData()...
20120501153523: START executeHaCommand()... nsm /usr/bin/rsync --rsync-path=/usr/bin/rsync --exclude-from=/var/netscreen/dbbackup/exclude.rsync --timeout=3600 --delete -avze /usr/bin/ssh /var/netscreen/GuiSvr 172.27.117.65:/var/netscreen/GuiSvr/../
20120501153523: END executeHaCommand()...
20120501153523: START displayHaStatus()...
20120501153523: Consecutive remote rsync failures..1
20120501153523: Gui Server Status...
20120501153523: ...Consecutive start failures......0
20120501153523: ...Consecutive backup failures.....0
20120501153523: Dev Server Status...
20120501153523: ...Consecutive start failures......0
20120501153523: ...Consecutive backup failures.....0
20120501153523: END displayHaStatus()...
20120501153523: The rsync command for GuiSvr failed. Command used was '/usr/bin/rsync --rsync-path=/usr/bin/rsync --exclude-from=/var/netscreen/dbbackup/exclude.rsync --timeout=3600 --delete -avze /usr/bin/ssh /var/netscreen/GuiSvr 172.27.117.65:/var/netscreen/GuiSvr/../'
20120501153523: END haRsyncDirect()...
20120501153523: END doDirectHa()...
20120501153523: Direct rsync for devSvr and guiSvr failed.
20120501153622:
readConfigFileEntries()...
20120501153622: Setting trap signals...
20120501153622: START doDirectHa()... ==============================
20120501153622: START haSyncFile()... DevSvr devSvr.cfg
20120501153622: START hasGuiSvrSharedDisk()...
20120501153622: END hasGuiSvrSharedDisk()...
20120501153622: START hasDevSvrSharedDisk()...
20120501153622: END hasDevSvrSharedDisk()...
20120501153622: START executeHaCommand()... nsm /usr/bin/rsync --rsync-path=/usr/bin/rsync --exclude-from=/var/netscreen/dbbackup/exclude.rsync --timeout=3600 --delete -avze /usr/bin/ssh /var/netscreen/DevSvr/devSvr.cfg 172.27.117.65:/var/netscreen/DevSvr/devSvr.cfg
20120501153622: END executeHaCommand()...
20120501153622: START displayHaStatus()...
20120501153622: Consecutive remote rsync failures..0
20120501153622: Gui Server Status...
20120501153622: ...Consecutive start failures......0
20120501153622: ...Consecutive backup failures.....0
20120501153622: Dev Server Status...
20120501153622: ...Consecutive start failures......0
20120501153622: ...Consecutive backup failures.....0
20120501153622: END displayHaStatus()...
20120501153622: The rsync command failed. Command used was '/usr/bin/rsync --rsync-path=/usr/bin/rsync --exclude-from=/var/netscreen/dbbackup/exclude.rsync --timeout=3600 --delete -avze /usr/bin/ssh /var/netscreen/DevSvr/devSvr.cfg 172.27.117.65:/var/netscreen/DevSvr/devSvr.cfg'
20120501153622: END haSyncFile()...
20120501153624:
readConfigFileEntries()...
20120501153625: Setting trap signals...
20120501153625: START doDirectHa()... ==============================
20120501153625: START haSyncFile()... DevSvr devSvr.cfg
20120501153625: START hasGuiSvrSharedDisk()...
20120501153625: END hasGuiSvrSharedDisk()...
20120501153625: START hasDevSvrSharedDisk()...
20120501153625: END hasDevSvrSharedDisk()...
20120501153625: START executeHaCommand()... nsm /usr/bin/rsync --rsync-path=/usr/bin/rsync --exclude-from=/var/netscreen/dbbackup/exclude.rsync --timeout=3600 --delete -avze /usr/bin/ssh /var/netscreen/DevSvr/devSvr.cfg 172.27.117.65:/var/netscreen/DevSvr/devSvr.cfg
20120501153625: END executeHaCommand()...
20120501153625: START displayHaStatus()...
20120501153625: Consecutive remote rsync failures..0
20120501153625: Gui Server Status...
20120501153625: ...Consecutive start failures......0
20120501153625: ...Consecutive backup failures.....0
20120501153625: Dev Server Status...
20120501153625: ...Consecutive start failures......0
20120501153625: ...Consecutive backup failures.....0
20120501153625: END displayHaStatus()...
20120501153625: The rsync command failed. Command used was '/usr/bin/rsync --rsync-path=/usr/bin/rsync --exclude-from=/var/netscreen/dbbackup/exclude.rsync --timeout=3600 --delete -avze /usr/bin/ssh /var/netscreen/DevSvr/devSvr.cfg 172.27.117.65:/var/netscreen/DevSvr/devSvr.cfg'
20120501153625: END haSyncFile()...
Solution:
Refer to the following article to create the trust relationship:
Modification History:
2020-10-18: Tagged article for EOL/EOE.
2019-07-12: updated related link.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search