[j-nsp] problem with commit in JUNOS 8.1R1.5

Erdem Sener erdems at gmail.com
Wed Feb 28 10:39:03 EST 2007 

Hi Georgi,

 On the logs:

Feb 27 10:34:37  Ruse-R-Edge rshd[7431]: root at re0 as root: cmd='rcp -T
-t /vat/tmp/juniper.conf1.gz'

I believe there's a typo "/vat" here, which might cause the problem.
Can you please check ?

Cheers,
Erdem

On 2/28/07, Georgi Yalamov <georgi.yalamov at btc-net.bg> wrote:
> Hello,
>
> In addition to "slow commit" problem in same network, same devices and
> JUNOS I must add some additional information. Actually the problem is
> because of this configuration statement:
>
> ilko at Ruse-R-Edge# show system accounting
> events [ login change-log interactive-commands ];
> destination {
>    tacplus {
>        server {
>            A.B.C.D {
>                secret "$7$skg7JKlo30Vo5369CAu"; ## SECRET-DATA
>                source-address X.X.X.X;
>            }
>        }
>    }
> }
>
>
> Without this tacacs accounting commit synchronize works normally. This
> problem appears only to m320 with two routing engines, without
> graceful-switchover and name-servers.
>
> Here is log message from re1 which is backup at this moment and do
> commit sync on re0.
>
> % date
> Tue Feb 27 12:50:36 EET 2007
> % tail -f /var/log/messages
> Feb 26 10:40:26  Ruse-R-Edge mgd[6914]: UI_DBASE_LOGIN_EVENT: User
> 'ilko' entering configuration mode
> Feb 26 10:40:34  Ruse-R-Edge mgd[6914]: UI_DBASE_LOGOUT_EVENT: User
> 'ilko' exiting configuration mode
> Feb 26 10:40:58  Ruse-R-Edge mgd[7105]: UI_TACPLUS_ERROR: TACACS+
> failure: connect: timed out
> Feb 26 10:41:01  Ruse-R-Edge mgd[7105]: UI_LOAD_EVENT: User 'root' is
> performing a 'load update'
> Feb 26 10:49:24  Ruse-R-Edge mgd[7105]: UI_COMMIT: User 'ilko' performed
> commit: no comment
> Feb 27 10:34:37  Ruse-R-Edge rshd[7431]: root at re0 as root: cmd='rcp -T
> -t /vat/tmp/juniper.conf1.gz'
> Feb 27 12:49:06  Ruse-R-Edge mgd[7445]: UI_TACPLUS_ERROR: TACACS+
> failure: connect: timed out
> Feb 27 12:49:09  Ruse-R-Edge mgd[7445]: UI_LOAD_EVENT: User 'root' is
> performing a 'load update'
> Feb 27 12:50:06  Ruse-R-Edge login: LOGIN_INFORMATION: User ilko logged
> in from host re0 on device ttyp0
> Feb 27 12:50:09  Ruse-R-Edge mgd[7448]: UI_TACPLUS_ERROR: TACACS+
> failure: connect: timed out
>
>
> This is commit without "system accounting " statements in configuration.
> Feb 27 12:57:32  Ruse-R-Edge mgd[7445]: UI_COMMIT: User 'ilko' performed
> commit: no comment
> Feb 27 12:59:28  Ruse-R-Edge mgd[7663]: UI_LOAD_EVENT: User 'root' is
> performing a 'load update'
> Feb 27 12:59:28  Ruse-R-Edge mgd[7663]: UI_COMMIT: User 'ilko' performed
> commit: no comment
>
>
> Feb 27 13:00:09  Ruse-R-Edge mgd[7875]: UI_LOAD_EVENT: User 'root' is
> performing a 'load update'
> Feb 27 13:00:09  Ruse-R-Edge mgd[7875]: UI_COMMIT: User 'ilko' performed
> commit: no comment
>
>
> This seems to me that this is some kind of bug. I'll be grateful if
> somebody can give an advice.
>
>
> Kind regards,
>
> --
> George Yalamov
> Bulgarian Telecommunications Company AD
> Senior Engineer Core/Metro Technologies
>
> tel: 359 2 949 6844
>
>
>
>
> Vesselin Kostov wrote:
> > Hello All,
> >
> > We have problem when commiting the configuration after we upgraded to JUNOS
> > 8.1R1.5.
> >
> > It is taking about 8 minutes for commit:
> >
> > 2007-02-20 10:30:54 EET: push configuration to re1 2007-02-20 10:38:28 EET:
> > asking re1 to commit
> >
> > With the old JUNOS the commit was taking less than 2 minutes:
> >
> > 2007-02-20 10:37:01 EET: push configuration to re1 2007-02-20 10:37:05 EET:
> > asking re1 to commit
> >
> > Does anyone else had this problem or it is normal?
> >
> >
> >
> > lko at ipswitch# commit | display detail re0: 2007-02-20 10:30:50 EET:
> > obtaining db lock on  re1
> > 2007-02-20 10:30:53 EET: exporting juniper.conf 2007-02-20 10:30:53 EET:
> > expanding groups 2007-02-20 10:30:53 EET: finished expanding groups
> > 2007-02-20 10:30:53 EET: setup foreign files 2007-02-20 10:30:53 EET:
> > propagating foreign files 2007-02-20 10:30:53 EET: complete foreign files
> > 2007-02-20 10:30:53 EET: dropping unchanged foreign files 2007-02-20
> > 10:30:53 EET: executing 'ffp propagate'
> > 2007-02-20 10:30:53 EET: daemons checking new configuration 2007-02-20
> > 10:30:53 EET: Routing protocol daemon checking new configuration 2007-02-20
> > 10:30:53 EET: Init daemon checking new configuration 2007-02-20 10:30:53
> > EET: Interface daemon checking new configuration 2007-02-20 10:30:53 EET:
> > Pic Services Logging daemon checking new configuration 2007-02-20 10:30:54
> > EET: Web management daemon checking new configuration 2007-02-20 10:30:54
> > EET: Autoinstallation daemon checking new configuration configuration check
> > succeeds 2007-02-20 10:30:54 EET: executing 'ffp synchronize'
> > 2007-02-20 10:30:54 EET: push configuration to re1 2007-02-20 10:38:28 EET:
> > asking re1 to commit
> > re1: 2007-02-20 10:38:34 EET: exporting juniper.conf 2007-02-20 10:38:34
> > EET: expanding groups 2007-02-20 10:38:34 EET: finished expanding groups
> > 2007-02-20 10:38:34 EET: setup foreign files 2007-02-20 10:38:34 EET:
> > propagating foreign files 2007-02-20 10:38:35 EET: complete foreign files
> > 2007-02-20 10:38:35 EET: dropping unchanged foreign files 2007-02-20
> > 10:38:35 EET: executing 'ffp propagate'
> > 2007-02-20 10:38:35 EET: daemons checking new configuration 2007-02-20
> > 10:38:35 EET: Routing protocol daemon checking new configuration 2007-02-20
> > 10:38:35 EET: Init daemon checking new configuration 2007-02-20 10:38:35
> > EET: Interface daemon checking new configuration 2007-02-20 10:38:35 EET:
> > Pic Services Logging daemon checking new configuration 2007-02-20 10:38:35
> > EET: Adaptive Services PIC daemon checking new configuration 2007-02-20
> > 10:38:35 EET: Web management daemon checking new configuration 2007-02-20
> > 10:38:35 EET: Autoinstallation daemon checking new configuration 2007-02-20
> > 10:38:35 EET: commit wrapup...
> > 2007-02-20 10:38:35 EET: activating '/var/etc/init.inc'
> > 2007-02-20 10:38:35 EET: updating '/var/etc/filters/filter-define.conf'
> > 2007-02-20 10:38:35 EET: activating '/var/etc/master.passwd'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/rc.conf.inc'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/keyadmin.conf'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/sysids'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/login.conf'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/ttys'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/resolv.conf'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/hosts'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/group'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/pam.conf'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/pam_radius.conf'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/gtpcd.conf'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/certs'
> > 2007-02-20 10:38:36 EET: activating '/var/etc/motd'
> > 2007-02-20 10:38:36 EET: executing foreign_commands 2007-02-20 10:38:36 EET:
> > /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:38:36 EET: executing
> > ui_commit in rc.ui 2007-02-20 10:38:37 EET: executing 'ffp activate'
> > 2007-02-20 10:38:37 EET: copying configuration to juniper.save 2007-02-20
> > 10:38:37 EET: activating '/var/run/db/juniper.data'
> > 2007-02-20 10:38:37 EET: notifying daemons of new configuration 2007-02-20
> > 10:38:37 EET:  notifying mgd(1) 2007-02-20 10:38:37 EET: signaling
> > 'Management daemon', pid 3948, signal 1, status 0 with notification errors
> > enabled 2007-02-20 10:38:37 EET:  notifying rpd(2) 2007-02-20 10:38:37 EET:
> > cannot signal 'Routing protocol daemon', signal 1, no pid 2007-02-20
> > 10:38:37 EET:  notifying init(4) 2007-02-20 10:38:37 EET: signaling 'Init
> > daemon', pid 1, signal 1, status 0 with notification errors enabled
> > 2007-02-20 10:38:37 EET:  notifying dcd(9) 2007-02-20 10:38:37 EET:
> > signaling 'Interface daemon', pid 3965, signal 1, status 0 with notification
> > errors enabled 2007-02-20 10:38:37 EET:  notifying fsad(22) 2007-02-20
> > 10:38:37 EET: cannot signal 'Pic Services Logging daemon', signal 1, no pid
> > 2007-02-20 10:38:37 EET:  notifying syslogd(29) 2007-02-20 10:38:37 EET:
> > signaling 'Syslog daemon', pid 3810, signal 1, status 0 with notification
> > errors enabled 2007-02-20 10:38:37 EET:  notifying spd(30) 2007-02-20
> > 10:38:37 EET: cannot signal 'Adaptive Services PIC daemon', signal 1, no pid
> > 2007-02-20 10:38:37 EET:  notifying httpd(33) 2007-02-20 10:38:37 EET:
> > cannot signal 'Web management daemon', signal 1, no pid commit complete
> > re0: 2007-02-20 10:38:39 EET: commit wrapup...
> > 2007-02-20 10:38:39 EET: activating '/var/etc/init.inc'
> > 2007-02-20 10:38:39 EET: updating '/var/etc/filters/filter-define.conf'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/rc.conf.inc'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/keyadmin.conf'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/sysids'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/ttys'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/resolv.conf'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/hosts'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/pam.conf'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/pam_radius.conf'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/gtpcd.conf'
> > 2007-02-20 10:38:39 EET: activating '/var/etc/certs'
> > 2007-02-20 10:38:39 EET: executing foreign_commands 2007-02-20 10:38:39 EET:
> > /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:38:39 EET: executing
> > ui_commit in rc.ui 2007-02-20 10:38:40 EET: executing 'ffp activate'
> > 2007-02-20 10:38:40 EET: copying configuration to juniper.save 2007-02-20
> > 10:38:40 EET: activating '/var/run/db/juniper.data'
> > 2007-02-20 10:38:40 EET: notifying daemons of new configuration 2007-02-20
> > 10:38:40 EET:  notifying mgd(1) 2007-02-20 10:38:40 EET: signaling
> > 'Management daemon', pid 3132, signal 1, status 0 with notification errors
> > enabled 2007-02-20 10:38:40 EET:  notifying rpd(2) 2007-02-20 10:38:40 EET:
> > signaling 'Routing protocol daemon', pid 3157, signal 1, status 0 with
> > notification errors enabled 2007-02-20 10:38:40 EET:  notifying init(4)
> > 2007-02-20 10:38:40 EET: signaling 'Init daemon', pid 1, signal 1, status 0
> > with notification errors enabled 2007-02-20 10:38:40 EET:  notifying dcd(9)
> > 2007-02-20 10:38:40 EET: signaling 'Interface daemon', pid 3152, signal 1,
> > status 0 with notification errors enabled 2007-02-20 10:38:40 EET:
> > notifying fsad(22) 2007-02-20 10:38:40 EET: signaling 'Pic Services Logging
> > daemon', pid 3168, signal 1, status 0 with notification errors enabled
> > 2007-02-20 10:38:40 EET:  notifying syslogd(29) 2007-02-20 10:38:40 EET:
> > signaling 'Syslog daemon', pid 2939, signal 1, status 0 with notification
> > errors enabled 2007-02-20 10:38:40 EET:  notifying httpd(33) 2007-02-20
> > 10:38:40 EET: cannot signal 'Web management daemon', signal 1, no pid
> > commit complete
> >
> > ilko at Kardzhali-R-Edge# commit | display detail 2007-02-20 10:36:58 EET:
> > obtaining db lock on  re1 2007-02-20 10:37:01 EET: exporting juniper.conf
> > 2007-02-20 10:37:01 EET: expanding groups 2007-02-20 10:37:01 EET: finished
> > expanding groups 2007-02-20 10:37:01 EET: setup foreign files 2007-02-20
> > 10:37:01 EET: propagating foreign files 2007-02-20 10:37:01 EET: complete
> > foreign files 2007-02-20 10:37:01 EET: dropping unchanged foreign files
> > 2007-02-20 10:37:01 EET: daemons checking new configuration configuration
> > check succeeds 2007-02-20 10:37:01 EET: push configuration to re1 2007-02-20
> > 10:37:05 EET: asking re1 to commit
> > re1: commit complete
> > 2007-02-20 10:37:16 EET: commit wrapup...
> > 2007-02-20 10:37:16 EET: updating '/var/etc/filters/filter-define.conf'
> > 2007-02-20 10:37:16 EET: activating '/var/etc/ifinfo.conf'
> > 2007-02-20 10:37:16 EET: activating '/var/etc/gtpcd.conf'
> > 2007-02-20 10:37:16 EET: activating '/var/etc/certs'
> > 2007-02-20 10:37:16 EET: executing foreign_commands 2007-02-20 10:37:16 EET:
> > /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:37:16 EET: executing
> > ui_commit in rc.ui 2007-02-20 10:37:17 EET: copying configuration to
> > juniper.save 2007-02-20 10:37:17 EET: activating '/var/run/db/juniper.data'
> > 2007-02-20 10:37:17 EET: notifying daemons of new configuration 2007-02-20
> > 10:37:17 EET: signaling 'Interface daemon', pid 7184, signal 1, status 0
> > with notification errors enabled 2007-02-20 10:37:17 EET: signaling 'Routing
> > protocol daemon', pid 7155, signal 1, status 0 with notification errors
> > enabled 2007-02-20 10:37:17 EET: signaling 'MIB2 daemon', pid 7154, signal
> > 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
> > signaling 'Sonet APS daemon', pid 7156, signal 1, status 0 with notification
> > errors enabled 2007-02-20 10:37:17 EET: signaling 'VRRP daemon', pid 7157,
> > signal 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
> > signaling 'PFE daemon', pid 7189, signal 1, status 0 with notification
> > errors enabled 2007-02-20 10:37:17 EET: signaling 'Traffic sampling control
> > daemon', pid 7158, signal 1, status 0 with notification errors enabled
> > 2007-02-20 10:37:17 EET: signaling 'IPSec Key Management daemon', pid 7188,
> > signal 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
> > signaling 'Forwarding UDP daemon', pid 7163, signal 1, status 0 with
> > notification errors enabled 2007-02-20 10:37:17 EET: signaling 'Adaptive
> > Services PIC daemon', pid 7170, signal 1, status 0 with notification errors
> > enabled 2007-02-20 10:37:17 EET: signaling 'SDX daemon', pid 7175, signal 1,
> > status 0 with notification errors enabled 2007-02-20 10:37:17 EET: signaling
> > 'Redundancy device daemon', pid 7178, signal 1, status 0 with notification
> > errors enabled commit complete
> >
> > Thanks,
> >
> > Vesko
> >
> >
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
> >
> >
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>

More information about the juniper-nsp mailing list