-
Notifications
You must be signed in to change notification settings - Fork 174
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
makedhcp fails with no error RHEL7.7/7.8 with FIPS enabled #6757
Comments
@kjhee43 , how did u enable the FIPS? |
https://access.redhat.com/solutions/137833 I follow this procedure. You can also install in FIPS mode by adding fips=1 to the install command line. |
the above link didn't work for me. |
I fixed the link. Try now. |
Thanks. |
|
ran the above process, here are outputs I got:
I didn't see failure for dhcpd service |
Its not dhcp service. The service is fine. If you add some hosts/networks and do a "makedhcp", the new hosts don't appear in the config file. Nothing is populated/updated in dhcpd.conf |
right, I recreated now after I added new networks and new hosts. |
@cxhong you were able to reproduce the error? |
yes, I can reproduce the error |
@kjhee43 , I spent some time to debug this issue today. It appears
Followed above steps to enable FIPS
Add a new network (60_0_0_0-255_0_0_0) to network table:
Add IP add to the interface
NOTE: make sure this new nic showed up in the route table. I think last time I didn't check the route,
after
Then I added a new node
|
@cxhong Can you post the entire dhcpd.conf file? Are all the networks there and defined properly? |
this is for
|
the
let me look into more |
named failed, something wrong with omapi key
keys in the
also defined in the password table
|
for the named, changed
also made changes in the /etc/dhcp/dhcpd.conf, but |
looks like |
@cxhong i do not know how to debug omshell.... |
with FIPS enabled,
|
@cxhong anything else we can do to get this working? |
I think some security setting needs to change, but I couldn't figure out what yet. I hope expert in this community will give us some hints. |
@cxhong any hope of getting this fixed? |
@cxhong I was looking at the source for this, and as I see it, the changes need to happen in the following places(assuming
@kjhee43 If your cluster is still in testing mode, can you try these code changes as they should be trivial changes, and then test? This should work even if FIPS isn't enabled. If you're not comfortable with making code changes, let me know, and I'll try and give you a patch to apply. |
Thanks, @samveen.
can u give me a example how to do that? I tried to modify on the maybe easier if you can open a pull request for this? |
@cxhong I'll create a WIP MR for this. |
@cxhong, I'm not following the exchange here....what is a WIP MR? Is there something that can be back ported into xcat 2.16.0? |
@cxhong so it will be part of the next release? |
@cxhong any word on the patch? |
RHEL7.6 with FIPS enabled:
makedhcp works as expected and dhcpd.conf is created/updated properly
RHEL7.7/7.8 with FIPS enabled:
makedhcp executes but fails silently. Nothing is populated/updated in dhcpd.conf
The text was updated successfully, but these errors were encountered: