<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Markus,<div class=""><br class=""></div><div class="">I tested the update version <span style="font-family: Menlo; font-size: 11px;" class="">1.1.16-1+deb9u1.2</span> and still no luck.</div><div class=""><br class=""></div><div class=""><img apple-inline="yes" id="CCA175F3-A356-4FB1-AFD9-5041FEBA8547" width="1030" height="59" src="cid:55D61B2A-6805-4561-8B4C-59A25C2268E6@fibertel.com.ar" class=""><br class=""><div><br class=""></div><div>Regards,</div><div>Alejandro</div><div><br class=""><blockquote type="cite" class=""><div class="">On 12 Nov 2020, at 20:57, Markus Koschany <<a href="mailto:apo@debian.org" class="">apo@debian.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi,<br class=""><br class="">Am Donnerstag, den 12.11.2020, 18:21 +0100 schrieb Pallai Roland:<br class=""><blockquote type="cite" class="">Hi Markus,<br class=""><br class="">The problem is still the same here:<br class=""></blockquote><br class="">Thanks for your debug log. I have looked at every line of code again and<br class="">compared the original upstream patch from here<br class=""><br class=""><br class=""><a href="https://bugzilla.redhat.com/attachment.cgi?id=1722701" class="">https://bugzilla.redhat.com/attachment.cgi?id=1722701</a><br class=""><br class="">with the released fix from here<br class=""><br class="">https://github.com/ClusterLabs/pacemaker/pull/2210/commits/7babd406e7195fcce57850a8589b06e095642c33<br class=""><br class="">There is only one thing that stands out, in fencing/commands.c<br class=""><br class="">if client = NULL, then they assume now it is a peer and this is always allowed<br class="">to interact. For me it is the only explanation at the moment why you still see<br class=""><br class="">Rejecting IPC request 'lrmd_rsc_info' from unprivileged client crmd<br class=""><br class="">If you take a closer look at the patch then the allowed variable must be true<br class="">in lrmd/lrmd.c but in your case it is (incorrectly) false. Since crmd is part<br class="">of pacemaker it should not be rejected. Please try the new version at<br class=""><br class="">https://people.debian.org/~apo/lts/pacemaker/<br class=""><br class="">and report back if that addresses the problem.<br class=""><br class="">Thanks,<br class=""><br class="">Markus<br class=""></div></div></blockquote></div><br class=""></div></body></html>