[j-nsp] problem with commit in JUNOS 8.1R1.5

Georgi Yalamov georgi.yalamov at btc-net.bg
Wed Feb 28 11:04:16 EST 2007 

Erdem Sener wrote:
> Hi Georgi,
>
> On the logs:
>
> Feb 27 10:34:37  Ruse-R-Edge rshd[7431]: root at re0 as root: cmd='rcp -T
> -t /vat/tmp/juniper.conf1.gz'
>
> I believe there's a typo "/vat" here, which might cause the problem.
> Can you please check ?

Yes, this is a mistake that I thing is not related to the case.  Just 
forget to cut that part of the log.  This problem appears on every M320 
with two REs and 8.1R1.5 - more than 20 boxes.


Thanks


> Cheers,
> Erdem
>
> On 2/28/07, Georgi Yalamov <georgi.yalamov at btc-net.bg> wrote:
>> Hello,
>>
>> In addition to "slow commit" problem in same network, same devices and
>> JUNOS I must add some additional information. Actually the problem is
>> because of this configuration statement:
>>
>> ilko at Ruse-R-Edge# show system accounting
>> events [ login change-log interactive-commands ];
>> destination {
>>    tacplus {
>>        server {
>>            A.B.C.D {
>>                secret "$7$skg7JKlo30Vo5369CAu"; ## SECRET-DATA
>>                source-address X.X.X.X;
>>            }
>>        }
>>    }
>> }
>>
>>
>> Without this tacacs accounting commit synchronize works normally. This
>> problem appears only to m320 with two routing engines, without
>> graceful-switchover and name-servers.
>>
>> Here is log message from re1 which is backup at this moment and do
>> commit sync on re0.
>>
>> % date
>> Tue Feb 27 12:50:36 EET 2007
>> % tail -f /var/log/messages
>> Feb 26 10:40:26  Ruse-R-Edge mgd[6914]: UI_DBASE_LOGIN_EVENT: User
>> 'ilko' entering configuration mode
>> Feb 26 10:40:34  Ruse-R-Edge mgd[6914]: UI_DBASE_LOGOUT_EVENT: User
>> 'ilko' exiting configuration mode
>> Feb 26 10:40:58  Ruse-R-Edge mgd[7105]: UI_TACPLUS_ERROR: TACACS+
>> failure: connect: timed out
>> Feb 26 10:41:01  Ruse-R-Edge mgd[7105]: UI_LOAD_EVENT: User 'root' is
>> performing a 'load update'
>> Feb 26 10:49:24  Ruse-R-Edge mgd[7105]: UI_COMMIT: User 'ilko' performed
>> commit: no comment
>> Feb 27 10:34:37  Ruse-R-Edge rshd[7431]: root at re0 as root: cmd='rcp -T
>> -t /vat/tmp/juniper.conf1.gz'
>> Feb 27 12:49:06  Ruse-R-Edge mgd[7445]: UI_TACPLUS_ERROR: TACACS+
>> failure: connect: timed out
>> Feb 27 12:49:09  Ruse-R-Edge mgd[7445]: UI_LOAD_EVENT: User 'root' is
>> performing a 'load update'
>> Feb 27 12:50:06  Ruse-R-Edge login: LOGIN_INFORMATION: User ilko logged
>> in from host re0 on device ttyp0
>> Feb 27 12:50:09  Ruse-R-Edge mgd[7448]: UI_TACPLUS_ERROR: TACACS+
>> failure: connect: timed out
>>
>>
>> This is commit without "system accounting " statements in configuration.
>> Feb 27 12:57:32  Ruse-R-Edge mgd[7445]: UI_COMMIT: User 'ilko' performed
>> commit: no comment
>> Feb 27 12:59:28  Ruse-R-Edge mgd[7663]: UI_LOAD_EVENT: User 'root' is
>> performing a 'load update'
>> Feb 27 12:59:28  Ruse-R-Edge mgd[7663]: UI_COMMIT: User 'ilko' performed
>> commit: no comment
>>
>>
>> Feb 27 13:00:09  Ruse-R-Edge mgd[7875]: UI_LOAD_EVENT: User 'root' is
>> performing a 'load update'
>> Feb 27 13:00:09  Ruse-R-Edge mgd[7875]: UI_COMMIT: User 'ilko' performed
>> commit: no comment
>>
>>
>> This seems to me that this is some kind of bug. I'll be grateful if
>> somebody can give an advice.
>>
>>
>> Kind regards,
>>
>> -- 
>> George Yalamov
>> Bulgarian Telecommunications Company AD
>> Senior Engineer Core/Metro Technologies
>>
>> tel: 359 2 949 6844
>>
>>
>>
>>
>> Vesselin Kostov wrote:
>> > Hello All,
>> >
>> > We have problem when commiting the configuration after we upgraded 
>> to JUNOS
>> > 8.1R1.5.
>> >
>> > It is taking about 8 minutes for commit:
>> >
>> > 2007-02-20 10:30:54 EET: push configuration to re1 2007-02-20 
>> 10:38:28 EET:
>> > asking re1 to commit
>> >
>> > With the old JUNOS the commit was taking less than 2 minutes:
>> >
>> > 2007-02-20 10:37:01 EET: push configuration to re1 2007-02-20 
>> 10:37:05 EET:
>> > asking re1 to commit
>> >
>> > Does anyone else had this problem or it is normal?
>> >
>> >
>> >
>> > lko at ipswitch# commit | display detail re0: 2007-02-20 10:30:50 EET:
>> > obtaining db lock on  re1
>> > 2007-02-20 10:30:53 EET: exporting juniper.conf 2007-02-20 10:30:53 
>> EET:
>> > expanding groups 2007-02-20 10:30:53 EET: finished expanding groups
>> > 2007-02-20 10:30:53 EET: setup foreign files 2007-02-20 10:30:53 EET:
>> > propagating foreign files 2007-02-20 10:30:53 EET: complete foreign 
>> files
>> > 2007-02-20 10:30:53 EET: dropping unchanged foreign files 2007-02-20
>> > 10:30:53 EET: executing 'ffp propagate'
>> > 2007-02-20 10:30:53 EET: daemons checking new configuration 2007-02-20
>> > 10:30:53 EET: Routing protocol daemon checking new configuration 
>> 2007-02-20
>> > 10:30:53 EET: Init daemon checking new configuration 2007-02-20 
>> 10:30:53
>> > EET: Interface daemon checking new configuration 2007-02-20 
>> 10:30:53 EET:
>> > Pic Services Logging daemon checking new configuration 2007-02-20 
>> 10:30:54
>> > EET: Web management daemon checking new configuration 2007-02-20 
>> 10:30:54
>> > EET: Autoinstallation daemon checking new configuration 
>> configuration check
>> > succeeds 2007-02-20 10:30:54 EET: executing 'ffp synchronize'
>> > 2007-02-20 10:30:54 EET: push configuration to re1 2007-02-20 
>> 10:38:28 EET:
>> > asking re1 to commit
>> > re1: 2007-02-20 10:38:34 EET: exporting juniper.conf 2007-02-20 
>> 10:38:34
>> > EET: expanding groups 2007-02-20 10:38:34 EET: finished expanding 
>> groups
>> > 2007-02-20 10:38:34 EET: setup foreign files 2007-02-20 10:38:34 EET:
>> > propagating foreign files 2007-02-20 10:38:35 EET: complete foreign 
>> files
>> > 2007-02-20 10:38:35 EET: dropping unchanged foreign files 2007-02-20
>> > 10:38:35 EET: executing 'ffp propagate'
>> > 2007-02-20 10:38:35 EET: daemons checking new configuration 2007-02-20
>> > 10:38:35 EET: Routing protocol daemon checking new configuration 
>> 2007-02-20
>> > 10:38:35 EET: Init daemon checking new configuration 2007-02-20 
>> 10:38:35
>> > EET: Interface daemon checking new configuration 2007-02-20 
>> 10:38:35 EET:
>> > Pic Services Logging daemon checking new configuration 2007-02-20 
>> 10:38:35
>> > EET: Adaptive Services PIC daemon checking new configuration 
>> 2007-02-20
>> > 10:38:35 EET: Web management daemon checking new configuration 
>> 2007-02-20
>> > 10:38:35 EET: Autoinstallation daemon checking new configuration 
>> 2007-02-20
>> > 10:38:35 EET: commit wrapup...
>> > 2007-02-20 10:38:35 EET: activating '/var/etc/init.inc'
>> > 2007-02-20 10:38:35 EET: updating 
>> '/var/etc/filters/filter-define.conf'
>> > 2007-02-20 10:38:35 EET: activating '/var/etc/master.passwd'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/rc.conf.inc'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/keyadmin.conf'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/sysids'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/login.conf'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/ttys'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/resolv.conf'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/hosts'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/group'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/pam.conf'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/pam_radius.conf'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/gtpcd.conf'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/certs'
>> > 2007-02-20 10:38:36 EET: activating '/var/etc/motd'
>> > 2007-02-20 10:38:36 EET: executing foreign_commands 2007-02-20 
>> 10:38:36 EET:
>> > /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:38:36 EET: 
>> executing
>> > ui_commit in rc.ui 2007-02-20 10:38:37 EET: executing 'ffp activate'
>> > 2007-02-20 10:38:37 EET: copying configuration to juniper.save 
>> 2007-02-20
>> > 10:38:37 EET: activating '/var/run/db/juniper.data'
>> > 2007-02-20 10:38:37 EET: notifying daemons of new configuration 
>> 2007-02-20
>> > 10:38:37 EET:  notifying mgd(1) 2007-02-20 10:38:37 EET: signaling
>> > 'Management daemon', pid 3948, signal 1, status 0 with notification 
>> errors
>> > enabled 2007-02-20 10:38:37 EET:  notifying rpd(2) 2007-02-20 
>> 10:38:37 EET:
>> > cannot signal 'Routing protocol daemon', signal 1, no pid 2007-02-20
>> > 10:38:37 EET:  notifying init(4) 2007-02-20 10:38:37 EET: signaling 
>> 'Init
>> > daemon', pid 1, signal 1, status 0 with notification errors enabled
>> > 2007-02-20 10:38:37 EET:  notifying dcd(9) 2007-02-20 10:38:37 EET:
>> > signaling 'Interface daemon', pid 3965, signal 1, status 0 with 
>> notification
>> > errors enabled 2007-02-20 10:38:37 EET:  notifying fsad(22) 2007-02-20
>> > 10:38:37 EET: cannot signal 'Pic Services Logging daemon', signal 
>> 1, no pid
>> > 2007-02-20 10:38:37 EET:  notifying syslogd(29) 2007-02-20 10:38:37 
>> EET:
>> > signaling 'Syslog daemon', pid 3810, signal 1, status 0 with 
>> notification
>> > errors enabled 2007-02-20 10:38:37 EET:  notifying spd(30) 2007-02-20
>> > 10:38:37 EET: cannot signal 'Adaptive Services PIC daemon', signal 
>> 1, no pid
>> > 2007-02-20 10:38:37 EET:  notifying httpd(33) 2007-02-20 10:38:37 EET:
>> > cannot signal 'Web management daemon', signal 1, no pid commit 
>> complete
>> > re0: 2007-02-20 10:38:39 EET: commit wrapup...
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/init.inc'
>> > 2007-02-20 10:38:39 EET: updating 
>> '/var/etc/filters/filter-define.conf'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/rc.conf.inc'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/keyadmin.conf'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/sysids'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/ttys'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/resolv.conf'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/hosts'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/pam.conf'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/pam_radius.conf'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/gtpcd.conf'
>> > 2007-02-20 10:38:39 EET: activating '/var/etc/certs'
>> > 2007-02-20 10:38:39 EET: executing foreign_commands 2007-02-20 
>> 10:38:39 EET:
>> > /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:38:39 EET: 
>> executing
>> > ui_commit in rc.ui 2007-02-20 10:38:40 EET: executing 'ffp activate'
>> > 2007-02-20 10:38:40 EET: copying configuration to juniper.save 
>> 2007-02-20
>> > 10:38:40 EET: activating '/var/run/db/juniper.data'
>> > 2007-02-20 10:38:40 EET: notifying daemons of new configuration 
>> 2007-02-20
>> > 10:38:40 EET:  notifying mgd(1) 2007-02-20 10:38:40 EET: signaling
>> > 'Management daemon', pid 3132, signal 1, status 0 with notification 
>> errors
>> > enabled 2007-02-20 10:38:40 EET:  notifying rpd(2) 2007-02-20 
>> 10:38:40 EET:
>> > signaling 'Routing protocol daemon', pid 3157, signal 1, status 0 with
>> > notification errors enabled 2007-02-20 10:38:40 EET:  notifying 
>> init(4)
>> > 2007-02-20 10:38:40 EET: signaling 'Init daemon', pid 1, signal 1, 
>> status 0
>> > with notification errors enabled 2007-02-20 10:38:40 EET:  
>> notifying dcd(9)
>> > 2007-02-20 10:38:40 EET: signaling 'Interface daemon', pid 3152, 
>> signal 1,
>> > status 0 with notification errors enabled 2007-02-20 10:38:40 EET:
>> > notifying fsad(22) 2007-02-20 10:38:40 EET: signaling 'Pic Services 
>> Logging
>> > daemon', pid 3168, signal 1, status 0 with notification errors enabled
>> > 2007-02-20 10:38:40 EET:  notifying syslogd(29) 2007-02-20 10:38:40 
>> EET:
>> > signaling 'Syslog daemon', pid 2939, signal 1, status 0 with 
>> notification
>> > errors enabled 2007-02-20 10:38:40 EET:  notifying httpd(33) 
>> 2007-02-20
>> > 10:38:40 EET: cannot signal 'Web management daemon', signal 1, no pid
>> > commit complete
>> >
>> > ilko at Kardzhali-R-Edge# commit | display detail 2007-02-20 10:36:58 
>> EET:
>> > obtaining db lock on  re1 2007-02-20 10:37:01 EET: exporting 
>> juniper.conf
>> > 2007-02-20 10:37:01 EET: expanding groups 2007-02-20 10:37:01 EET: 
>> finished
>> > expanding groups 2007-02-20 10:37:01 EET: setup foreign files 
>> 2007-02-20
>> > 10:37:01 EET: propagating foreign files 2007-02-20 10:37:01 EET: 
>> complete
>> > foreign files 2007-02-20 10:37:01 EET: dropping unchanged foreign 
>> files
>> > 2007-02-20 10:37:01 EET: daemons checking new configuration 
>> configuration
>> > check succeeds 2007-02-20 10:37:01 EET: push configuration to re1 
>> 2007-02-20
>> > 10:37:05 EET: asking re1 to commit
>> > re1: commit complete
>> > 2007-02-20 10:37:16 EET: commit wrapup...
>> > 2007-02-20 10:37:16 EET: updating 
>> '/var/etc/filters/filter-define.conf'
>> > 2007-02-20 10:37:16 EET: activating '/var/etc/ifinfo.conf'
>> > 2007-02-20 10:37:16 EET: activating '/var/etc/gtpcd.conf'
>> > 2007-02-20 10:37:16 EET: activating '/var/etc/certs'
>> > 2007-02-20 10:37:16 EET: executing foreign_commands 2007-02-20 
>> 10:37:16 EET:
>> > /bin/sh /etc/rc.ui ui_setup_users (sh) 2007-02-20 10:37:16 EET: 
>> executing
>> > ui_commit in rc.ui 2007-02-20 10:37:17 EET: copying configuration to
>> > juniper.save 2007-02-20 10:37:17 EET: activating 
>> '/var/run/db/juniper.data'
>> > 2007-02-20 10:37:17 EET: notifying daemons of new configuration 
>> 2007-02-20
>> > 10:37:17 EET: signaling 'Interface daemon', pid 7184, signal 1, 
>> status 0
>> > with notification errors enabled 2007-02-20 10:37:17 EET: signaling 
>> 'Routing
>> > protocol daemon', pid 7155, signal 1, status 0 with notification 
>> errors
>> > enabled 2007-02-20 10:37:17 EET: signaling 'MIB2 daemon', pid 7154, 
>> signal
>> > 1, status 0 with notification errors enabled 2007-02-20 10:37:17 EET:
>> > signaling 'Sonet APS daemon', pid 7156, signal 1, status 0 with 
>> notification
>> > errors enabled 2007-02-20 10:37:17 EET: signaling 'VRRP daemon', 
>> pid 7157,
>> > signal 1, status 0 with notification errors enabled 2007-02-20 
>> 10:37:17 EET:
>> > signaling 'PFE daemon', pid 7189, signal 1, status 0 with notification
>> > errors enabled 2007-02-20 10:37:17 EET: signaling 'Traffic sampling 
>> control
>> > daemon', pid 7158, signal 1, status 0 with notification errors enabled
>> > 2007-02-20 10:37:17 EET: signaling 'IPSec Key Management daemon', 
>> pid 7188,
>> > signal 1, status 0 with notification errors enabled 2007-02-20 
>> 10:37:17 EET:
>> > signaling 'Forwarding UDP daemon', pid 7163, signal 1, status 0 with
>> > notification errors enabled 2007-02-20 10:37:17 EET: signaling 
>> 'Adaptive
>> > Services PIC daemon', pid 7170, signal 1, status 0 with 
>> notification errors
>> > enabled 2007-02-20 10:37:17 EET: signaling 'SDX daemon', pid 7175, 
>> signal 1,
>> > status 0 with notification errors enabled 2007-02-20 10:37:17 EET: 
>> signaling
>> > 'Redundancy device daemon', pid 7178, signal 1, status 0 with 
>> notification
>> > errors enabled commit complete
>> >
>> > Thanks,
>> >
>> > Vesko
>> >
>> >
>> > _______________________________________________
>> > juniper-nsp mailing list juniper-nsp at puck.nether.net
>> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>> >
>> >
>>
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>
-- 
George Yalamov
Bulgarian Telecommunications Company AD
Senior Engineer Core/Metro Technologies

tel: 359 2 949 6844

More information about the juniper-nsp mailing list