we have an IBM XIV G3 and STOR2RRD will not connect

vrbro
edited August 2016 in IBM
We installed STOR2RRD and with out BROCADE 5300 fiber switches it works perfectly, but to our XIV we have no connection...
In our log we see...
ERROR Mon Aug 1 13:15:11 2016 xivperf.pl: Cannot get storage name. Connection error. Exiting.
* /usr/bin/wbemcli: Http Exception: SSL connect error

Comments

  • Hi,

    Are you sure that it is not blocked by a FW (port 5989)?

    /opt/freeware/bin/openssl s_client -showcerts -tls1 -connect 172.17.0.237:5989 /opt/freeware/bin/openssl s_client -showcerts -msg -tls1 -connect 172.17.0.237:5989 /opt/freeware/bin/openssl s_client -showcerts -ssl3 -connect 172.17.0.237:5989

    Change IP, PASSWORD and user
    CURLDEBUG=true /opt/freeware/bin/wbemcli -noverify -nl ei https://stor2rrd:PASSWORD@172.17.0.237:5989/root/ibm:IBMTSDS_StorageSystem


    Most probably XIV needs a CIM restart. We have already seen it.
    It is something what might be done by IBM support only. You will have to raise a support ticket for CIM restart.

    Post outputs and then we will see ..
  • Thanks Pavel,
    I did the commands ( here the logging ( password marked with XXXXXX ) )

    [root@pmg-bob01 ~]# /usr/bin/openssl s_client -showcerts -tls1 -connect 192.168.147.216:5989
    CONNECTED(00000003)
    write:errno=104
    ---
    no peer certificate available
    ---
    No client certificate CA names sent
    ---
    SSL handshake has read 0 bytes and written 0 bytes
    ---
    New, (NONE), Cipher is (NONE)
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    SSL-Session:
    Protocol : TLSv1
    Cipher : 0000
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    Key-Arg : None
    Krb5 Principal: None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1470316436
    Timeout : 7200 (sec)
    Verify return code: 0 (ok)
    ---
    [root@pmg-bob01 ~]# /usr/bin/openssl s_client -showcerts -msg -tls1 -connect 192.168.147.216:5989
    CONNECTED(00000003)
    >>> TLS 1.0 Handshake [length 0096], ClientHello
    01 00 00 92 03 01 57 a3 3f d6 3d 97 e7 b7 90 40
    ae 88 2b b4 bc 35 30 4e d6 df 0d 21 20 0b 12 41
    bf d0 cf f8 b8 54 00 00 4c c0 14 c0 0a 00 39 00
    38 00 88 00 87 c0 0f c0 05 00 35 00 84 c0 13 c0
    09 00 33 00 32 c0 12 c0 08 00 9a 00 99 00 45 00
    44 00 16 00 13 c0 0e c0 04 c0 0d c0 03 00 2f 00
    96 00 41 00 0a 00 07 c0 11 c0 07 c0 0c c0 02 00
    05 00 04 00 ff 01 00 00 1d 00 0b 00 04 03 00 01
    02 00 0a 00 08 00 06 00 19 00 18 00 17 00 23 00
    00 00 0f 00 01 01
    write:errno=104
    ---
    no peer certificate available
    ---
    No client certificate CA names sent
    ---
    SSL handshake has read 0 bytes and written 0 bytes
    ---
    New, (NONE), Cipher is (NONE)
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    SSL-Session:
    Protocol : TLSv1
    Cipher : 0000
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    Key-Arg : None
    Krb5 Principal: None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1470316502
    Timeout : 7200 (sec)
    Verify return code: 0 (ok)
    ---
    [root@pmg-bob01 ~]# /usr/bin/openssl s_client -showcerts -ssl3 -connect 192.168.147.216:5989
    CONNECTED(00000003)
    write:errno=104
    ---
    no peer certificate available
    ---
    No client certificate CA names sent
    ---
    SSL handshake has read 0 bytes and written 0 bytes
    ---
    New, (NONE), Cipher is (NONE)
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    SSL-Session:
    Protocol : SSLv3
    Cipher : 0000
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    Key-Arg : None
    Krb5 Principal: None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1470316564
    Timeout : 7200 (sec)
    Verify return code: 0 (ok)
    ---
    [root@pmg-bob01 ~]# CURLDEBUG=true /usr/bin/wbemcli -noverify -nl ei https://admin:XXXXXXXX@192.168.147.216:5989/root/ibm:IBMTSDS_StorageSystem
    * About to connect() to 192.168.147.216 port 5989 (#0)
    * Trying 192.168.147.216... * connected
    * Connected to 192.168.147.216 (192.168.147.216) port 5989 (#0)
    * Initializing NSS with certpath: sql:/etc/pki/nssdb
    * NSS error -5961
    * Closing connection #0
    * SSL connect error
    *
    * /usr/bin/wbemcli: Http Exception: SSL connect error
    *
    Greetings,
    vrbro
  • it really looks like CIM restart is necessary, pls raise a call with IBM support to let it restarted.
Sign In or Register to comment.