Ahoj,
mám 4 nody v jednom Proxmox clusteru. Používám Python knihovnu
proxmoxer s HTTPS backendem. Občas se stane, že REST API vrátí
401 Unauthorized: permission denied - invalid PVE ticket
Stává se to ještě před 2 hodinovým timeoutem lístku. Probíhající skript to přeruší. Někdy už pak lístek nedostane vůbec a musím restartovat démony pveproxy a pvedaemon.
Tuší někdo, co by to mohlo způsobovat? Čas je na všech nodech synchronizovaný podle defaultního systemd-timesyncd, tady by problém být neměl.
Napsal jsem na oficiální fórum Proxmoxu, ale zatím jsem žádnou odpověď nedostal.
logy z /var/log/pveproxy/access.log
192.168.7.10 - - [17/Jun/2020:09:47:29 +0200] "POST /api2/json/access/ticket HTTP/1.1" 401 13 "-" "python-requests/2.23.0"
192.168.7.10 - - [17/Jun/2020:09:55:20 +0200] "POST /api2/json/access/ticket HTTP/1.1" 401 13 "-" "python-requests/2.23.0"
192.168.7.10 - - [17/Jun/2020:10:23:43 +0200] "POST /api2/json/access/ticket HTTP/1.1" 401 13 "-" "python-requests/2.23.0"
192.168.7.10 - - [17/Jun/2020:10:37:45 +0200] "GET /api2/json/nodes HTTP/1.1" 401 5 "-" "python-requests/2.23.0"
192.168.7.10 - - [17/Jun/2020:10:37:56 +0200] "GET /api2/json/nodes/devel2/qemu/241/status/current HTTP/1.1" 401 5 "-" "python-requests/2.23.0"
192.168.7.10 - - [17/Jun/2020:10:39:15 +0200] "GET /api2/json/nodes HTTP/1.1" 401 5 "-" "python-requests/2.23.0"
systemctl status -l pveproxy
root@devel1:~# systemctl status -l pveproxy
● pveproxy.service - PVE API Proxy Server
Loaded: loaded (/lib/systemd/system/pveproxy.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2020-06-16 15:51:44 CEST; 18h ago
Process: 16677 ExecStartPre=/usr/bin/pvecm updatecerts --silent (code=exited, status=0/SUCCESS)
Process: 16686 ExecStart=/usr/bin/pveproxy start (code=exited, status=0/SUCCESS)
Process: 18296 ExecReload=/usr/bin/pveproxy restart (code=exited, status=0/SUCCESS)
Main PID: 16688 (pveproxy)
Tasks: 5 (limit: 7372)
Memory: 288.8M
CGroup: /system.slice/pveproxy.service
├─ 1561 pveproxy worker
├─ 1812 pveproxy worker
├─ 2197 pveproxy worker
├─16688 pveproxy
└─36856 pveproxy worker (shutdown)
Jun 17 10:38:49 devel1 pveproxy[16688]: starting 1 worker(s)
Jun 17 10:38:49 devel1 pveproxy[16688]: worker 1812 started
Jun 17 10:38:49 devel1 pveproxy[1812]: Clearing outdated entries from certificate cache
Jun 17 10:39:31 devel1 pveproxy[48057]: worker exit
Jun 17 10:40:48 devel1 pveproxy[16688]: worker 1386 finished
Jun 17 10:40:48 devel1 pveproxy[16688]: starting 1 worker(s)
Jun 17 10:40:48 devel1 pveproxy[16688]: worker 2197 started
Jun 17 10:40:49 devel1 pveproxy[2196]: got inotify poll request in wrong process - disabling inotify
Jun 17 10:40:49 devel1 pveproxy[2197]: Clearing outdated entries from certificate cache
Jun 17 10:40:50 devel1 pveproxy[2196]: worker exit
Setkal se někdo s tímto problémem?
Díky.