enStratus Agent Handshake Fails

[Jim Sander]

Eucalyptus api returns the DNS name as opposed to IP address

enStratus agent handshaking fails as it expects an IP address of the managed vm when the agent connects.

Excerpt from enStratus Log
======================
Comparing private euca-10-9-180-25.eucalyptus.internal against private 10.9.180.25

# euca-version &&euca-describe-instances
euca2ools 2.0.2
RESERVATION r-4DDD4183 264471547257 default-a
INSTANCE i-C3AC40FE emi-2C27388C euca-173-205-188-82.eucalyptus.partner.eucalyptus.com euca-10-9-180-21.eucalyptus.internal running jds-admin 0 c1.medium 2012-05-16T18:45:52Z partner01 eki-534D3816 eri-9CEF373F

Euca VM Attributes
===============
$ for attr in local-hostname public-hostname hostname local-ipv4 public-ipv4; do printf "%-17s %s\n" $attr `curl -s http://169.254.169.254/latest/meta-data/$attr`; done; echo
local-hostname euca-10-9-180-21.eucalyptus.internal
public-hostname euca-173-205-188-82.eucalyptus.partner.eucalyptus.com
hostname 173.205.188.82
local-ipv4 10.9.180.21
public-ipv4 173.205.188.82

Creds of Euca User
===============
EC2_ACCOUNT_NUMBER=264471547257
EC2_USER_ID=264471547257
EUARE_URL=http://euare.partner.eucalyptus.com:8773/services/Euare
EC2_URL=http://eucalyptus.partner.eucalyptus.com:8773/services/Eucalyptus
S3_URL=http://walrus.partner.eucalyptus.com:8773/services/Walrus
EC2_CERT=/root/.ssh/euca2-admin-x509/euca2-admin-3bcdf23d-cert.pem

[Jim Sander (jimsander)]

Below is the api debug output
========================
# euca-version &&euca-describe-instances --debug
euca2ools 2.0.2
2012-05-23 12:40:37,458 euca2ools [DEBUG]:Method: POST
2012-05-23 12:40:37,458 euca2ools [DEBUG]:Path: /services/Eucalyptus/
2012-05-23 12:40:37,458 euca2ools [DEBUG]:Data:
2012-05-23 12:40:37,458 euca2ools [DEBUG]:Headers: {}
2012-05-23 12:40:37,458 euca2ools [DEBUG]:Host: eucalyptus.partner.eucalyptus.com:8773
2012-05-23 12:40:37,458 euca2ools [DEBUG]:establishing HTTP connection: kwargs={}
2012-05-23 12:40:37,458 euca2ools [DEBUG]:using _calc_signature_2
2012-05-23 12:40:37,459 euca2ools [DEBUG]:query string: AWSAccessKeyId=QE37NMCM9RIH8IVDFIUQA&Action=DescribeInstances&SignatureMethod=HmacSHA256&SignatureVersion=2&Timestamp=2012-05-23T16%3A40%3A37Z&Version=2010-08-31
2012-05-23 12:40:37,459 euca2ools [DEBUG]:string_to_sign: POST
eucalyptus.partner.eucalyptus.com:8773
/services/Eucalyptus/
AWSAccessKeyId=QE37NMCM9RIH8IVDFIUQA&Action=DescribeInstances&SignatureMethod=HmacSHA256&SignatureVersion=2&Timestamp=2012-05-23T16%3A40%3A37Z&Version=2010-08-31
2012-05-23 12:40:37,459 euca2ools [DEBUG]:len(b64)=44
2012-05-23 12:40:37,460 euca2ools [DEBUG]:base64 encoded digest: 1wSnmFTaRmmyVUAoKaBeaw9NJ/Uj/yruFd1gnLfKg5k=
2012-05-23 12:40:37,460 euca2ools [DEBUG]:query_string: AWSAccessKeyId=QE37NMCM9RIH8IVDFIUQA&Action=DescribeInstances&SignatureMethod=HmacSHA256&SignatureVersion=2&Timestamp=2012-05-23T16%3A40%3A37Z&Version=2010-08-31 Signature: 1wSnmFTaRmmyVUAoKaBeaw9NJ/Uj/yruFd1gnLfKg5k=
send: 'POST /services/Eucalyptus/ HTTP/1.1\r\nHost: eucalyptus.partner.eucalyptus.com:8773\r\nAccept-Encoding: identity\r\nContent-Length: 218\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nUser-Agent: Boto/2.1.1 (linux2)\r\n\r\n'
send: 'AWSAccessKeyId=QE37NMCM9RIH8IVDFIUQA&Action=DescribeInstances&SignatureMethod=HmacSHA256&SignatureVersion=2&Timestamp=2012-05-23T16%3A40%3A37Z&Version=2010-08-31&Signature=1wSnmFTaRmmyVUAoKaBeaw9NJ/Uj/yruFd1gnLfKg5k%3D'
reply: 'HTTP/1.1 200 OK\r\n'
header: Content-Length: 2325
header: Content-Type: application/xml; charset=UTF-8
2012-05-23 12:40:38,113 euca2ools [DEBUG]:<DescribeInstancesResponse xmlns="http://ec2.amazonaws.com/doc/2010-08-31/"><reservationSet><item><reservationId>r-4DDD4183</reservationId><ownerId>264471547257</ownerId><groupSet><item><groupId>default-a</groupId></item></groupSet><instancesSet><item><instanceId>i-C3AC40FE</instanceId><imageId>emi-2C27388C</imageId><instanceState><code>16</code><name>running</name></instanceState><privateDnsName>euca-10-9-180-21.eucalyptus.internal</privateDnsName><dnsName>euca-173-205-188-82.eucalyptus.partner.eucalyptus.com</dnsName><reason>NORMAL: -- []</reason><keyName>jds-admin</keyName><amiLaunchIndex>0</amiLaunchIndex><productCodes/><instanceType>c1.medium</instanceType><launchTime>2012-05-16T18:45:52Z</launchTime><placement><availabilityZone>partner01</availabilityZone></placement><kernelId>eki-534D3816</kernelId><ramdiskId>eri-9CEF373F</ramdiskId><monitoring><state>false</state></monitoring><privateIpAddress>euca-10-9-180-21.eucalyptus.internal</privateIpAddress><ipAddress>euca-173-205-188-82.eucalyptus.partner.eucalyptus.com</ipAd...

[Andy Grimm (agrimm)]

This issue is now being tracked upstream at http://eucalyptus.atlassian.net/browse/EUCA-2796

Please watch that issue for further updates.