[DRBD-user] DRBD 9 Primary-Secondary, Pacemaker, and STONITH

[Bryan K. Walton]

On Wed, Nov 14, 2018 at 10:20:23AM +0100, Robert Altnoeder wrote:
> >> Is the above quote stating that if Pacemaker can't confirm that one
> >> node has been STONITHed, that it won't allow the remaining node to work,
> >> either?
> 
> At least in the default configuration, if fencing fails, the cluster
> freezes. The cluster does not stop anything that is already running on
> some other node, but it will also not start any services that are not
> running (e.g. those that were running on the node that is probably down).
> This situation continues until either a fencing retry succeeds, or until
> an operator manually confirms to the cluster that the node the cluster
> was trying to fence is down.

This makes a lot of sense, to me now.  Thanks!

-Bryan