← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1397231] [NEW] Can't create the second vpn-site-conn

 

Public bug reported:

Hi all,
   I can't create the second vpn-site-conn, and restart the vpnaas also has this error:

==========================================================================================

2014-11-28 01:29:09.791 6215 ERROR neutron.services.vpn.device_drivers.ipsec [-] Failed to enable vpn process on router e78e9837-4458-48d7-9ab5-e4acdf1789ce
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Traceback (most recent call last):
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 245, in enable
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.restart()
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 345, in restart
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.start()
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 390, in start
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     '--virtual_private', virtual_private
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 317, in _execute
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/ip_lib.py", line 466, in execute
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/utils.py", line 76, in execute
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     raise RuntimeError(m)
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError:
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', exec', 'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir','/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', '--uniqueids', '--nat_traversal', '--secretsfile', /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets','--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Exit code: 10
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stdout: ''
2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto:lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'

==========================================================================================

My env is openstack icehouse and system is centos 6.5.

I add some code then it is ok:

    def stop(self):
        #Stop process using whack
        #Note this will also stop pluto
        self.disconnect()
        self._execute([self.binary,
                       'whack',
                       '--ctlbase', self.pid_path,
                       '--shutdown',
                       ])
        #delete the pid file
      + pid_file = self.pid_path + '.pid'
      + if os.path.exists(pid_file):
      ++++++os.remove(pid_file)
        #clean connection_status info
        self.connection_status = {}

** Affects: neutron
     Importance: Undecided
         Status: New

** Description changed:

  Hi all,
-         I can't create the second vpn-site-conn, and restart the vpnaas also has this error:
+         I can't create the second vpn-site-conn, and restart the vpnaas also has this error:
  
+ ==========================================================================================
  
  2014-11-28 01:29:09.791 6215 ERROR neutron.services.vpn.device_drivers.ipsec [-] Failed to enable vpn process on router e78e9837-4458-48d7-9ab5-e4acdf1789ce
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Traceback (most recent call last):
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 245, in enable
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.restart()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 345, in restart
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.start()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 390, in start
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     '--virtual_private', virtual_private
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 317, in _execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/ip_lib.py", line 466, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/utils.py", line 76, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     raise RuntimeError(m)
- 2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError: 
- 2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', 'exec', 
-                                                                               'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', 
-                                                                               '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir', 
-                                                                               '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', 
-                                                                               '--uniqueids', '--nat_traversal', '--secretsfile', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets', 
-                                                                               '--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
+ 2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError:
+ 2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', exec', 'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir','/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', '--uniqueids', '--nat_traversal', '--secretsfile', /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets','--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Exit code: 10
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stdout: ''
- 2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto: 
-                                                                             lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'
+ 2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto:lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'
+ 
+ ==========================================================================================
  
  My env is openstack icehouse and system is centos 6.5.
  
  I add some code then it is ok:
  
-     def stop(self):
-         #Stop process using whack
-         #Note this will also stop pluto
-         self.disconnect()
-         self._execute([self.binary,
-                        'whack',
-                        '--ctlbase', self.pid_path,
-                        '--shutdown',
-                        ])
-         #delete the pid file
+     def stop(self):
+         #Stop process using whack
+         #Note this will also stop pluto
+         self.disconnect()
+         self._execute([self.binary,
+                        'whack',
+                        '--ctlbase', self.pid_path,
+                        '--shutdown',
+                        ])
+         #delete the pid file
  +        pid_file = self.pid_path + '.pid'
  +       if os.path.exists(pid_file):
  +            os.remove(pid_file)
-         #clean connection_status info
-         self.connection_status = {}
+         #clean connection_status info
+         self.connection_status = {}

** Description changed:

  Hi all,
-         I can't create the second vpn-site-conn, and restart the vpnaas also has this error:
+    I can't create the second vpn-site-conn, and restart the vpnaas also has this error:
  
  ==========================================================================================
  
  2014-11-28 01:29:09.791 6215 ERROR neutron.services.vpn.device_drivers.ipsec [-] Failed to enable vpn process on router e78e9837-4458-48d7-9ab5-e4acdf1789ce
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Traceback (most recent call last):
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 245, in enable
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.restart()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 345, in restart
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.start()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 390, in start
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     '--virtual_private', virtual_private
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 317, in _execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/ip_lib.py", line 466, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/utils.py", line 76, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     raise RuntimeError(m)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError:
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', exec', 'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir','/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', '--uniqueids', '--nat_traversal', '--secretsfile', /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets','--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Exit code: 10
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stdout: ''
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto:lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'
  
  ==========================================================================================
  
  My env is openstack icehouse and system is centos 6.5.
  
  I add some code then it is ok:
  
      def stop(self):
          #Stop process using whack
          #Note this will also stop pluto
          self.disconnect()
          self._execute([self.binary,
                         'whack',
                         '--ctlbase', self.pid_path,
                         '--shutdown',
                         ])
          #delete the pid file
- +        pid_file = self.pid_path + '.pid'
+ +       pid_file = self.pid_path + '.pid'
  +       if os.path.exists(pid_file):
- +            os.remove(pid_file)
+ +           os.remove(pid_file)
          #clean connection_status info
          self.connection_status = {}

** Description changed:

  Hi all,
     I can't create the second vpn-site-conn, and restart the vpnaas also has this error:
  
  ==========================================================================================
  
  2014-11-28 01:29:09.791 6215 ERROR neutron.services.vpn.device_drivers.ipsec [-] Failed to enable vpn process on router e78e9837-4458-48d7-9ab5-e4acdf1789ce
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Traceback (most recent call last):
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 245, in enable
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.restart()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 345, in restart
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.start()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 390, in start
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     '--virtual_private', virtual_private
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 317, in _execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/ip_lib.py", line 466, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/utils.py", line 76, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     raise RuntimeError(m)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError:
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', exec', 'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir','/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', '--uniqueids', '--nat_traversal', '--secretsfile', /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets','--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Exit code: 10
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stdout: ''
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto:lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'
  
  ==========================================================================================
  
  My env is openstack icehouse and system is centos 6.5.
  
  I add some code then it is ok:
  
      def stop(self):
          #Stop process using whack
          #Note this will also stop pluto
          self.disconnect()
          self._execute([self.binary,
                         'whack',
                         '--ctlbase', self.pid_path,
                         '--shutdown',
                         ])
          #delete the pid file
- +       pid_file = self.pid_path + '.pid'
- +       if os.path.exists(pid_file):
- +           os.remove(pid_file)
+       + pid_file = self.pid_path + '.pid'
+       + if os.path.exists(pid_file):
+       +     os.remove(pid_file)
          #clean connection_status info
          self.connection_status = {}

** Description changed:

  Hi all,
     I can't create the second vpn-site-conn, and restart the vpnaas also has this error:
  
  ==========================================================================================
  
  2014-11-28 01:29:09.791 6215 ERROR neutron.services.vpn.device_drivers.ipsec [-] Failed to enable vpn process on router e78e9837-4458-48d7-9ab5-e4acdf1789ce
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Traceback (most recent call last):
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 245, in enable
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.restart()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 345, in restart
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.start()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 390, in start
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     '--virtual_private', virtual_private
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 317, in _execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/ip_lib.py", line 466, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/utils.py", line 76, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     raise RuntimeError(m)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError:
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', exec', 'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir','/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', '--uniqueids', '--nat_traversal', '--secretsfile', /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets','--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Exit code: 10
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stdout: ''
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto:lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'
  
  ==========================================================================================
  
  My env is openstack icehouse and system is centos 6.5.
  
  I add some code then it is ok:
  
      def stop(self):
          #Stop process using whack
          #Note this will also stop pluto
          self.disconnect()
          self._execute([self.binary,
                         'whack',
                         '--ctlbase', self.pid_path,
                         '--shutdown',
                         ])
          #delete the pid file
-       + pid_file = self.pid_path + '.pid'
-       + if os.path.exists(pid_file):
-       +     os.remove(pid_file)
+       + pid_file = self.pid_path + '.pid'
+       + if os.path.exists(pid_file):
+       ++++++os.remove(pid_file)
          #clean connection_status info
          self.connection_status = {}

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1397231

Title:
  Can't  create the second vpn-site-conn

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Hi all,
     I can't create the second vpn-site-conn, and restart the vpnaas also has this error:

  ==========================================================================================

  2014-11-28 01:29:09.791 6215 ERROR neutron.services.vpn.device_drivers.ipsec [-] Failed to enable vpn process on router e78e9837-4458-48d7-9ab5-e4acdf1789ce
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Traceback (most recent call last):
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 245, in enable
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.restart()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 345, in restart
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     self.start()
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 390, in start
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     '--virtual_private', virtual_private
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/services/vpn/device_drivers/ipsec.py", line 317, in _execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/ip_lib.py", line 466, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     check_exit_code=check_exit_code)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec   File "/usr/lib/python2.6/site-packages/neutron/agent/linux/utils.py", line 76, in execute
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec     raise RuntimeError(m)
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec RuntimeError:
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', exec', 'qrouter-e78e9837-4458-48d7-9ab5-e4acdf1789ce', 'ipsec', 'pluto', '--ctlbase', '/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto', '--ipsecdir','/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc', '--use-netkey', '--uniqueids', '--nat_traversal', '--secretsfile', /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc/ipsec.secrets','--virtual_private', '%v4:22.22.22.0/24,%v4:11.11.11.0/24']
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Exit code: 10
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stdout: ''
  2014-11-28 01:29:09.791 6215 TRACE neutron.services.vpn.device_drivers.ipsec Stderr: 'adjusting ipsec.d to /var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/etc\npluto:lock file "/var/lib/neutron/ipsec/e78e9837-4458-48d7-9ab5-e4acdf1789ce/var/run/pluto.pid" already exists\n'

  ==========================================================================================

  My env is openstack icehouse and system is centos 6.5.

  I add some code then it is ok:

      def stop(self):
          #Stop process using whack
          #Note this will also stop pluto
          self.disconnect()
          self._execute([self.binary,
                         'whack',
                         '--ctlbase', self.pid_path,
                         '--shutdown',
                         ])
          #delete the pid file
        + pid_file = self.pid_path + '.pid'
        + if os.path.exists(pid_file):
        ++++++os.remove(pid_file)
          #clean connection_status info
          self.connection_status = {}

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1397231/+subscriptions


Follow ups

References