[j-nsp] problem with commit in JUNOS 8.1R1.5
Georgi Yalamov
georgi.yalamov at btc-net.bg
Wed Feb 28 03:22:50 EST 2007
Hello,
In addition to "slow commit" problem in same network, same devices and
JUNOS I must add some additional information. Actually the problem is
because of this configuration statement:
ilko at Ruse-R-Edge# show system accounting
events [ login change-log interactive-commands ];
destination {
tacplus {
server {
A.B.C.D {
secret "$7$skg7JKlo30Vo5369CAu"; ## SECRET-DATA
source-address X.X.X.X;
}
}
}
}
Without this tacacs accounting commit synchronize works normally. This
problem appears only to m320 with two routing engines, without
graceful-switchover and name-servers.
Here is log message from re1 which is backup at this moment and do
commit sync on re0.
% date
Tue Feb 27 12:50:36 EET 2007
% tail -f /var/log/messages
Feb 26 10:40:26 Ruse-R-Edge mgd[6914]: UI_DBASE_LOGIN_EVENT: User
'ilko' entering configuration mode
Feb 26 10:40:34 Ruse-R-Edge mgd[6914]: UI_DBASE_LOGOUT_EVENT: User
'ilko' exiting configuration mode
Feb 26 10:40:58 Ruse-R-Edge mgd[7105]: UI_TACPLUS_ERROR: TACACS+
failure: connect: timed out
Feb 26 10:41:01 Ruse-R-Edge mgd[7105]: UI_LOAD_EVENT: User 'root' is
performing a 'load update'
Feb 26 10:49:24 Ruse-R-Edge mgd[7105]: UI_COMMIT: User 'ilko' performed
commit: no comment
Feb 27 10:34:37 Ruse-R-Edge rshd[7431]: root at re0 as root: cmd='rcp -T
-t /vat/tmp/juniper.conf1.gz'
Feb 27 12:49:06 Ruse-R-Edge mgd[7445]: UI_TACPLUS_ERROR: TACACS+
failure: connect: timed out
Feb 27 12:49:09 Ruse-R-Edge mgd[7445]: UI_LOAD_EVENT: User 'root' is
performing a 'load update'
Feb 27 12:50:06 Ruse-R-Edge login: LOGIN_INFORMATION: User ilko logged
in from host re0 on device ttyp0
Feb 27 12:50:09 Ruse-R-Edge mgd[7448]: UI_TACPLUS_ERROR: TACACS+
failure: connect: timed out
This is commit without "system accounting " statements in configuration.
Feb 27 12:57:32 Ruse-R-Edge mgd[7445]: UI_COMMIT: User 'ilko' performed
commit: no comment
Feb 27 12:59:28 Ruse-R-Edge mgd[7663]: UI_LOAD_EVENT: User 'root' is
performing a 'load update'
Feb 27 12:59:28 Ruse-R-Edge mgd[7663]: UI_COMMIT: User 'ilko' performed
commit: no comment
Feb 27 13:00:09 Ruse-R-Edge mgd[7875]: UI_LOAD_EVENT: User 'root' is
performing a 'load update'
Feb 27 13:00:09 Ruse-R-Edge mgd[7875]: UI_COMMIT: User 'ilko' performed
commit: no comment
This seems to me that this is some kind of bug. I'll be grateful if
somebody can give an advice.
Kind regards,
--
George Yalamov
Bulgarian Telecommunications Company AD
Senior Engineer Core/Metro Technologies
tel: 359 2 949 6844
Vesselin Kostov wrote:
> Hello All,
>
> We have problem when commiting the configuration after we upgraded to JUNOS
> 8.1R1.5.
>
> It is taking about 8 minutes for commit:
>
> 2007-02-20 10:30:54 EET: push configuration to re1 2007-02-20 10:38:28 EET:
> asking re1 to commit
>
> With the old JUNOS the commit was taking less than 2 minutes:
>
> 2007-02-20 10:37:01 EET: push configuration to re1 2007-02-20 10:37:05 EET:
> asking re1 to commit
>
> Does anyone else had this problem or it is normal?
>
>
>
> lko at ipswitch# commit | display detail re0: 2007-02-20 10:30:50 EET:
> obtaining db lock on re1
> 2007-02-20 10:30:53 EET: exporting juniper.conf 2007-02-20 10:30:53 EET:
> expanding groups 2007-02-20 10:30:53 EET: finished expanding groups
> 2007-02-20 10:30:53 EET: setup foreign files 2007-02-20 10:30:53 EET:
> propagating foreign files 2007-02-20 10:30:53 EET: complete foreign files
> 2007-02-20 10:30:53 EET: dropping unchanged foreign files 2007-02-20
> 10:30:53 EET: executing 'ffp propagate'
> 2007-02-20 10:30:53 EET: daemons checking new configuration 2007-02-20
> 10:30:53 EET: Routing protocol daemon checking new configuration 2007-02-20
> 10:30:53 EET: Init daemon checking new configuration 2007-02-20 10:30:53
> EET: Interface daemon checking new configuration 2007-02-20 10:30:53 EET:
> Pic Services Logging daemon checking new configuration 2007-02-20 10:30:54
> EET: Web management daemon checking new configuration 2007-02-20 10:30:54
> EET: Autoinstallation daemon checking new configuration configuration check
> succeeds 2007-02-20 10:30:54 EET: executing 'ffp synchronize'
> 2007-02-20 10:30:54 EET: push configuration to re1 2007-02-20 10:38:28 EET:
> asking re1 to commit
> re1: 2007-02-20 10:38:34 EET: exporting juniper.conf 2007-02-20 10:38:34
> EET: expanding groups 2007-02-20 10:38:34 EET: finished expanding groups
> 2007-02-20 10:38:34 EET: setup foreign files 2007-02-20 10:38:34 EET:
> propagating foreign files 2007-02-20 10:38:35 EET: complete foreign files
> 2007-02-20 10:38:35 EET: dropping unchanged foreign files 2007-02-20
> 10:38:35 EET: executing 'ffp propagate'
> 2007-02-20 10:38:35 EET: daemons checking new configuration 2007-02-20
> 10:38:35 EET: Routing protocol daemon checking new configuration 2007-02-20
> 10:38:35 EET: Init daemon checking new configuration 2007-02-20 10:38:35
> EET: Interface daemon checking new configuration 2007-02-20 10:38:35 EET:
> Pic Services Logging daemon checking new configuration 2007-02-20 10:38:35
> EET: Adaptive Services PIC daemon checking new configuration 2007-02-20
> 10:38:35 EET: Web management daemon checking new configuration 2007-02-20
> 10:38:35 EET: Autoinstallation daemon checking new configuration 2007-02-20
> 10:38:35 EET: commit wrapup...
> 2007-02-20 10:38:35 EET: activating '/var/etc/init.inc'
> 2007-02-20 10:38:35 EET: updating '/var/etc/filters/filter-define.conf'
> 2007-02-20 10:38:35 EET: activating '/var/etc/master.passwd'
> 2007-02-20 10:38:36 EET: activating '/var/etc/rc.conf.inc'
> 2007-02-20 10:38:36 EET: activating '/var/etc/keyadmin.conf'
> 2007-02-20 10:38:36 EET: activating '/var/etc/sysids'
> 2007-02-20 10:38:36 EET: activating '/var/etc/login.conf'
> 2007-02-20 10:38:36 EET: activating '/var/etc/ttys'
> 2007-02-20 10:38:36 EET: activating '/var/etc/resolv.conf'
> 2007-02-20 10:38:36 EET: activating '/var/etc/hosts'
> 2007-02-20 10:38:36 EET: activating '/var/etc/group'
> 2007-02-20 10:38:36 EET: activating '/var/etc/pam.conf'
> 2007-02-20 10:38:36 EET: activating '/var/etc/pam_radius.conf'
> 2007-02-20 10:38:36 EET: activating '/var/etc/gtpcd.conf'
> 2007-02-20 10:38:36 EET: activating '/var/etc/certs'
> 2007-02-20 10:38:36 EET: activating '/var/etc/motd'
> 2007-02-20 10:38:36 EET: executing foreign_commands 2007-02-20 10:38:36 EET:
> /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:38:36 EET: executing
> ui_commit in rc.ui 2007-02-20 10:38:37 EET: executing 'ffp activate'
> 2007-02-20 10:38:37 EET: copying configuration to juniper.save 2007-02-20
> 10:38:37 EET: activating '/var/run/db/juniper.data'
> 2007-02-20 10:38:37 EET: notifying daemons of new configuration 2007-02-20
> 10:38:37 EET: notifying mgd(1) 2007-02-20 10:38:37 EET: signaling
> 'Management daemon', pid 3948, signal 1, status 0 with notification errors
> enabled 2007-02-20 10:38:37 EET: notifying rpd(2) 2007-02-20 10:38:37 EET:
> cannot signal 'Routing protocol daemon', signal 1, no pid 2007-02-20
> 10:38:37 EET: notifying init(4) 2007-02-20 10:38:37 EET: signaling 'Init
> daemon', pid 1, signal 1, status 0 with notification errors enabled
> 2007-02-20 10:38:37 EET: notifying dcd(9) 2007-02-20 10:38:37 EET:
> signaling 'Interface daemon', pid 3965, signal 1, status 0 with notification
> errors enabled 2007-02-20 10:38:37 EET: notifying fsad(22) 2007-02-20
> 10:38:37 EET: cannot signal 'Pic Services Logging daemon', signal 1, no pid
> 2007-02-20 10:38:37 EET: notifying syslogd(29) 2007-02-20 10:38:37 EET:
> signaling 'Syslog daemon', pid 3810, signal 1, status 0 with notification
> errors enabled 2007-02-20 10:38:37 EET: notifying spd(30) 2007-02-20
> 10:38:37 EET: cannot signal 'Adaptive Services PIC daemon', signal 1, no pid
> 2007-02-20 10:38:37 EET: notifying httpd(33) 2007-02-20 10:38:37 EET:
> cannot signal 'Web management daemon', signal 1, no pid commit complete
> re0: 2007-02-20 10:38:39 EET: commit wrapup...
> 2007-02-20 10:38:39 EET: activating '/var/etc/init.inc'
> 2007-02-20 10:38:39 EET: updating '/var/etc/filters/filter-define.conf'
> 2007-02-20 10:38:39 EET: activating '/var/etc/rc.conf.inc'
> 2007-02-20 10:38:39 EET: activating '/var/etc/keyadmin.conf'
> 2007-02-20 10:38:39 EET: activating '/var/etc/sysids'
> 2007-02-20 10:38:39 EET: activating '/var/etc/ttys'
> 2007-02-20 10:38:39 EET: activating '/var/etc/resolv.conf'
> 2007-02-20 10:38:39 EET: activating '/var/etc/hosts'
> 2007-02-20 10:38:39 EET: activating '/var/etc/pam.conf'
> 2007-02-20 10:38:39 EET: activating '/var/etc/pam_radius.conf'
> 2007-02-20 10:38:39 EET: activating '/var/etc/gtpcd.conf'
> 2007-02-20 10:38:39 EET: activating '/var/etc/certs'
> 2007-02-20 10:38:39 EET: executing foreign_commands 2007-02-20 10:38:39 EET:
> /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:38:39 EET: executing
> ui_commit in rc.ui 2007-02-20 10:38:40 EET: executing 'ffp activate'
> 2007-02-20 10:38:40 EET: copying configuration to juniper.save 2007-02-20
> 10:38:40 EET: activating '/var/run/db/juniper.data'
> 2007-02-20 10:38:40 EET: notifying daemons of new configuration 2007-02-20
> 10:38:40 EET: notifying mgd(1) 2007-02-20 10:38:40 EET: signaling
> 'Management daemon', pid 3132, signal 1, status 0 with notification errors
> enabled 2007-02-20 10:38:40 EET: notifying rpd(2) 2007-02-20 10:38:40 EET:
> signaling 'Routing protocol daemon', pid 3157, signal 1, status 0 with
> notification errors enabled 2007-02-20 10:38:40 EET: notifying init(4)
> 2007-02-20 10:38:40 EET: signaling 'Init daemon', pid 1, signal 1, status 0
> with notification errors enabled 2007-02-20 10:38:40 EET: notifying dcd(9)
> 2007-02-20 10:38:40 EET: signaling 'Interface daemon', pid 3152, signal 1,
> status 0 with notification errors enabled 2007-02-20 10:38:40 EET:
> notifying fsad(22) 2007-02-20 10:38:40 EET: signaling 'Pic Services Logging
> daemon', pid 3168, signal 1, status 0 with notification errors enabled
> 2007-02-20 10:38:40 EET: notifying syslogd(29) 2007-02-20 10:38:40 EET:
> signaling 'Syslog daemon', pid 2939, signal 1, status 0 with notification
> errors enabled 2007-02-20 10:38:40 EET: notifying httpd(33) 2007-02-20
> 10:38:40 EET: cannot signal 'Web management daemon', signal 1, no pid
> commit complete
>
> ilko at Kardzhali-R-Edge# commit | display detail 2007-02-20 10:36:58 EET:
> obtaining db lock on re1 2007-02-20 10:37:01 EET: exporting juniper.conf
> 2007-02-20 10:37:01 EET: expanding groups 2007-02-20 10:37:01 EET: finished
> expanding groups 2007-02-20 10:37:01 EET: setup foreign files 2007-02-20
> 10:37:01 EET: propagating foreign files 2007-02-20 10:37:01 EET: complete
> foreign files 2007-02-20 10:37:01 EET: dropping unchanged foreign files
> 2007-02-20 10:37:01 EET: daemons checking new configuration configuration
> check succeeds 2007-02-20 10:37:01 EET: push configuration to re1 2007-02-20
> 10:37:05 EET: asking re1 to commit
> re1: commit complete
> 2007-02-20 10:37:16 EET: commit wrapup...
> 2007-02-20 10:37:16 EET: updating '/var/etc/filters/filter-define.conf'
> 2007-02-20 10:37:16 EET: activating '/var/etc/ifinfo.conf'
> 2007-02-20 10:37:16 EET: activating '/var/etc/gtpcd.conf'
> 2007-02-20 10:37:16 EET: activating '/var/etc/certs'
> 2007-02-20 10:37:16 EET: executing foreign_commands 2007-02-20 10:37:16 EET:
> /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:37:16 EET: executing
> ui_commit in rc.ui 2007-02-20 10:37:17 EET: copying configuration to
> juniper.save 2007-02-20 10:37:17 EET: activating '/var/run/db/juniper.data'
> 2007-02-20 10:37:17 EET: notifying daemons of new configuration 2007-02-20
> 10:37:17 EET: signaling 'Interface daemon', pid 7184, signal 1, status 0
> with notification errors enabled 2007-02-20 10:37:17 EET: signaling 'Routing
> protocol daemon', pid 7155, signal 1, status 0 with notification errors
> enabled 2007-02-20 10:37:17 EET: signaling 'MIB2 daemon', pid 7154, signal
> 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
> signaling 'Sonet APS daemon', pid 7156, signal 1, status 0 with notification
> errors enabled 2007-02-20 10:37:17 EET: signaling 'VRRP daemon', pid 7157,
> signal 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
> signaling 'PFE daemon', pid 7189, signal 1, status 0 with notification
> errors enabled 2007-02-20 10:37:17 EET: signaling 'Traffic sampling control
> daemon', pid 7158, signal 1, status 0 with notification errors enabled
> 2007-02-20 10:37:17 EET: signaling 'IPSec Key Management daemon', pid 7188,
> signal 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
> signaling 'Forwarding UDP daemon', pid 7163, signal 1, status 0 with
> notification errors enabled 2007-02-20 10:37:17 EET: signaling 'Adaptive
> Services PIC daemon', pid 7170, signal 1, status 0 with notification errors
> enabled 2007-02-20 10:37:17 EET: signaling 'SDX daemon', pid 7175, signal 1,
> status 0 with notification errors enabled 2007-02-20 10:37:17 EET: signaling
> 'Redundancy device daemon', pid 7178, signal 1, status 0 with notification
> errors enabled commit complete
>
> Thanks,
>
> Vesko
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
More information about the juniper-nsp
mailing list