DNS Clustering Issues

[shashya]

Hello,

I have a problem with my DNS cluster. I have 3 name servers and out of those three,
one is reachable
one shows

API key used has insufficient ACLs. The clustering ACL is required.

and the last one shows

Disabled due to connection failures. [Enable]

When I enable the same, it kind of slows down the Clusters and DNS function loading page and after some time, half and hour or so, the option is again disabled.
Can anyone please help me out on this?
I am not able to find a solution for this.

Thanks in advance.

 

[cPanelLauren]

I'd suggest ensuring you can connect to each server you're trying to connect to from the webserver. It sounds like there may be networking or firewall issues with the communication between the servers.

 

[vs-fam]

I'd suggest ensuring you can connect to each server you're trying to connect to from the webserver. It sounds like there may be networking or firewall issues with the communication between the servers.

I'm getting this error: "API key used has insufficient ACLs. The clustering ACL is required.". Your answer applies for that too?

My cluster of 3 DNSONLY servers is working with all but one new server giving the error I mentioned. I find hard to believe that the reason behind "ACL error" is a networking or firewall issue. The error would be extremely misleading.

Thanks

 

[cPanelLauren]

There are a few issues that can cause this but the primary being an issue with connection, though the output is misleading in the OP's post they did also have the following error which led me to believe their specific issue was related to a networking or connection issue:

Disabled due to connection failures. [Enable]

There are a few recent cases involving clusters and the API token. Which version of cPanel/WHM are you currently on?

Can you provide me with answers to the following?

- Does the file below exist on any of the servers?

/root/.accesshash

- If you're on 11.84.0.14 or higher is the Set up Reverse Trust box checked in the cluster configuration?

 

[vs-fam]

There are a few issues that can cause this but the primary being an issue with connection, though the output is misleading in the OP's post they did also have the following error which led me to believe their specific issue was related to a networking or connection issue:

Since you give one response to all the errors the OP posted, that is why I asked if your answer applies to all or you missed the ACL error.

There are a few recent cases involving clusters and the API token. Which version of cPanel/WHM are you currently on?

v84.0.17 on full cPanel servers
v82.0.19 on DNSONLY

Can you provide me with answers to the following?

- Does the file below exist on any of the servers?

/root/.accesshash

It exists in all but the new server i'm trying to add.

- If you're on 11.84.0.14 or higher is the Set up Reverse Trust box checked in the cluster configuration?

No

Thanks

 

[vs-fam]

Well, as soon as I updated all DNSONLY servers to v84.0.17 the errors went away.

 

[cPanelLauren]

Hi,


That issue with the acceshash, is present prior to 84.0.14 as a part of CPANEL-29163 - we deprecated the accesshash method in favor of API Tokens. We found in that case that the /root/accesshash file existing was causing an issue with the API tokens. This issue was resolved for 84.0.14 and higher though and I'm glad to see that updating resolved it.

Thanks!