NTPD on slave nodes listen to wrong interfaces

Bug #1470569 reported by Dennis Dmitriev
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
Critical
Alex Schultz
6.1.x
Fix Committed
Critical
Alexey Stupnikov

Bug Description

NTPD cannot connect to external peers from controllers and from other slaves to controllers.

On controllers, NTPD listen to only 'vr-mgmt' interface where address vip__management_vrouter is assigned:

#### /etc/ntp.conf:
interface listen < vip__management_vrouter>

On other slaves, NTPD listen to only 'lo' interface:

#### /etc/ntp.conf:
interface listen lo

Looks like NTPD tries to establish connection to peers using the same interfaces that configured in 'interface listen ...'.
Thus, NTPD cannot reach to admin network using interface vr-mgmt , and other slaves cannot reach management network using 'lo' interface.

On controllers, the following interfaces should be configured in /etc/ntp.conf:

interface listen vr-ns
interface listen vr-mgmt

On other slaves:

interface listen br-mgmt

Changed in fuel:
status: New → Confirmed
Revision history for this message
Vladimir Kuklin (vkuklin) wrote :
Revision history for this message
Vladimir Kuklin (vkuklin) wrote :

Related/Partial fix ^^

Revision history for this message
Dmitry Ilyin (idv1985) wrote :
Changed in fuel:
status: Confirmed → In Progress
Changed in fuel:
assignee: Dmitry Ilyin (idv1985) → Alex Schultz (alex-schultz)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/197629
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=7ae589baeee7877c5dd597e106c2673dd65b2530
Submitter: Jenkins
Branch: master

commit 7ae589baeee7877c5dd597e106c2673dd65b2530
Author: Dmitry Ilyin <email address hidden>
Date: Thu Jul 2 14:54:19 2015 +0300

    Make ntpd listen all interfaces

    * Remove ntpd listen restrictions
    * Remove client run on controllers
    * Add ubuntu service overrides for ntp
    * ntp server should use only ipv4
    * update dnsmasq to only listen on management vrouter vip

    TestImpact
    Change-Id: Ic78394fddaafa82e085c55a1a0fdd3c46d4f0089
    Closes-Bug: 1466090
    Closes-Bug: 1470569

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
Andrey Sledzinskiy (asledzinskiy) wrote :

verified on
{

    "build_id": "2015-08-05_21-24-26",
    "build_number": "139",
    "release_versions":

{

    "2015.1.0-7.0":

{

    "VERSION":

{

    "build_id": "2015-08-05_21-24-26",
    "build_number": "139",
    "api": "1.0",
    "fuel-library_sha": "347d51f391a6f2c621006c00e3416718140889ac",
    "nailgun_sha": "c842770d56680d0e0cdf3573d329ce36d4fb2c64",
    "feature_groups":

            [
                "mirantis"
            ],
            "fuel-nailgun-agent_sha": "1512b9af6b41cc95c4d891c593aeebe0faca5a63",
            "openstack_version": "2015.1.0-7.0",
            "fuel-agent_sha": "1fe47720ba554818a0be707f2e16281791492d50",
            "production": "docker",
            "python-fuelclient_sha": "28ddd022fd230fde0e88f2f3e4a6a6dddcb58abe",
            "astute_sha": "e1d3a435e5df5b40cbfb1a3acf80b4176d15a2dc",
            "fuel-ostf_sha": "5cb828f6200e5ae0da63dd39d11fbf910237db95",
            "release": "7.0",
            "fuelmain_sha": "858a4ee8336789c10c5c2189c3718f9a605d0eeb"
        }
    }

},
"auth_required": true,
"api": "1.0",
"fuel-library_sha": "347d51f391a6f2c621006c00e3416718140889ac",
"nailgun_sha": "c842770d56680d0e0cdf3573d329ce36d4fb2c64",
"feature_groups":

    [
        "mirantis"
    ],
    "fuel-nailgun-agent_sha": "1512b9af6b41cc95c4d891c593aeebe0faca5a63",
    "openstack_version": "2015.1.0-7.0",
    "fuel-agent_sha": "1fe47720ba554818a0be707f2e16281791492d50",
    "production": "docker",
    "python-fuelclient_sha": "28ddd022fd230fde0e88f2f3e4a6a6dddcb58abe",
    "astute_sha": "e1d3a435e5df5b40cbfb1a3acf80b4176d15a2dc",
    "fuel-ostf_sha": "5cb828f6200e5ae0da63dd39d11fbf910237db95",
    "release": "7.0",
    "fuelmain_sha": "858a4ee8336789c10c5c2189c3718f9a605d0eeb"

}

Changed in fuel:
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/6.1)

Fix proposed to branch: stable/6.1
Review: https://review.openstack.org/310409

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/6.1)

Reviewed: https://review.openstack.org/310409
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=bd3345ae33f37136bd50b00931d7308d43520f97
Submitter: Jenkins
Branch: stable/6.1

commit bd3345ae33f37136bd50b00931d7308d43520f97
Author: Dmitry Ilyin <email address hidden>
Date: Thu Jul 2 14:54:19 2015 +0300

    Make ntpd listen all interfaces

    * Remove ntpd listen restrictions
    * Remove client run on controllers
    * Add ubuntu service overrides for ntp
    * ntp server should use only ipv4
    * update dnsmasq to only listen on management vrouter vip

    TestImpact
    Change-Id: Ic78394fddaafa82e085c55a1a0fdd3c46d4f0089
    Closes-Bug: 1466090
    Closes-Bug: 1470569

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.