we have an IBM XIV G3 and STOR2RRD will not connect

vrbro

We installed STOR2RRD and with out BROCADE 5300 fiber switches it works perfectly, but to our XIV we have no connection...
In our log we see...
ERROR Mon Aug 1 13:15:11 2016 xivperf.pl: Cannot get storage name. Connection error. Exiting.
* /usr/bin/wbemcli: Http Exception: SSL connect error

Pavel

Hi,

Are you sure that it is not blocked by a FW (port 5989)?

/opt/freeware/bin/openssl s_client -showcerts -tls1 -connect 172.17.0.237:5989 /opt/freeware/bin/openssl s_client -showcerts -msg -tls1 -connect 172.17.0.237:5989 /opt/freeware/bin/openssl s_client -showcerts -ssl3 -connect 172.17.0.237:5989

Change IP, PASSWORD and user
CURLDEBUG=true /opt/freeware/bin/wbemcli -noverify -nl ei https://stor2rrd:PASSWORD@172.17.0.237:5989/root/ibm:IBMTSDS_StorageSystem


Most probably XIV needs a CIM restart. We have already seen it.
It is something what might be done by IBM support only. You will have to raise a support ticket for CIM restart.

Post outputs and then we will see ..

vrbro

Thanks Pavel,
I did the commands ( here the logging ( password marked with XXXXXX ) )

[root@pmg-bob01 ~]# /usr/bin/openssl s_client -showcerts -tls1 -connect 192.168.147.216:5989
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
Start Time: 1470316436
Timeout : 7200 (sec)
Verify return code: 0 (ok)
---
[root@pmg-bob01 ~]# /usr/bin/openssl s_client -showcerts -msg -tls1 -connect 192.168.147.216:5989
CONNECTED(00000003)
>>> TLS 1.0 Handshake [length 0096], ClientHello
01 00 00 92 03 01 57 a3 3f d6 3d 97 e7 b7 90 40
ae 88 2b b4 bc 35 30 4e d6 df 0d 21 20 0b 12 41
bf d0 cf f8 b8 54 00 00 4c c0 14 c0 0a 00 39 00
38 00 88 00 87 c0 0f c0 05 00 35 00 84 c0 13 c0
09 00 33 00 32 c0 12 c0 08 00 9a 00 99 00 45 00
44 00 16 00 13 c0 0e c0 04 c0 0d c0 03 00 2f 00
96 00 41 00 0a 00 07 c0 11 c0 07 c0 0c c0 02 00
05 00 04 00 ff 01 00 00 1d 00 0b 00 04 03 00 01
02 00 0a 00 08 00 06 00 19 00 18 00 17 00 23 00
00 00 0f 00 01 01
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
Start Time: 1470316502
Timeout : 7200 (sec)
Verify return code: 0 (ok)
---
[root@pmg-bob01 ~]# /usr/bin/openssl s_client -showcerts -ssl3 -connect 192.168.147.216:5989
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : SSLv3
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
Start Time: 1470316564
Timeout : 7200 (sec)
Verify return code: 0 (ok)
---
[root@pmg-bob01 ~]# CURLDEBUG=true /usr/bin/wbemcli -noverify -nl ei https://admin:XXXXXXXX@192.168.147.216:5989/root/ibm:IBMTSDS_StorageSystem
* About to connect() to 192.168.147.216 port 5989 (#0)
* Trying 192.168.147.216... * connected
* Connected to 192.168.147.216 (192.168.147.216) port 5989 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* NSS error -5961
* Closing connection #0
* SSL connect error
*
* /usr/bin/wbemcli: Http Exception: SSL connect error
*
Greetings,
vrbro

Pavel

it really looks like CIM restart is necessary, pls raise a call with IBM support to let it restarted.