Cluster Services fail on boot because of Firewall (HEARTBEAT, OPENAIS)

This document (7007820) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 10
SUSE Linux Enterprise Server 11

Situation

Configured and tested network based cluster services fail on boot. The Firewall settings are checked and verified. Still the services fail.

Resolution

Reason for this is that the Firewall starts in two stages, Number one

   SuSEfirewall2_init

which closes every port and and Number two

   SuSEfirewall2_Setup

which opens defined ports again. And the cluster service starts in between these two stages.

The solution is to disable Stage one if security permits

   insserv -f -r SuSEfirewall2_init

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.