barrykfl--- via FreeIPA-users wrote:

Already set a cluster of 2 nodes can work fine

but evey reboot corosync seem conflict with certmonger service and login service

and cause ssh shell login slow. and idea.? other funct of freeipa / HA actually is working fine.

It seem will fail login service and zabbix agent also for the corosync. after that I diabale zabbix agent seem login service can work

but still certmanger is fail with corosync started,.

systemctl --failed UNIT                  LOAD   ACTIVE SUB    DESCRIPTION ● certmonger.service loaded failed failed Certificate monitoring and PKI enrollm ● zabbix_agentd.service loaded failed failed Zabbix Agent

[ [32m  OK  [0m] Stopped Login Service.          Starting Login Service... Jan 10 14:32:32 central03 kernel: [97458.949608] off_oom_killer_ (2027): /proc/970/oom_adj is deprecated, please use /proc/970/oom_score_adj instead. [ [1;31mFAILED [0m] Failed to start Login Service.          Starting Command Scheduler... [ [1;31mFAILED [0m] Failed to start Zabbix Agent. See 'systemctl status zabbix_agentd.service' for details. Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.DBus.Error.TimedOut: Activation of org.freedesktop.PolicyKit1 timed out (g-dbus-error-quark, 20)

You'd need to poke at dbus to see if it is up at all I guess.

IPA does not test with pacemaker or another HA service. Failover is done using DNS SRV records generally.

rob