libvirt users - Dec 2020 - SASL(-1): generic failure: All-whitespace username - from HA/pacemaker

Hi guys,

I have a HA/pacemaker cluster with VirtualDomain and it all 
seems to work fine, VMs start & stop, except for live migration.
So I thought I'd start here with errors I see, from 'pacemaker':

...
All-whitespace username.
 ?notice: vpn1_migrate_to_0[977276] error output [ error: 
authentication failed: Failed to start SASL negotiation: -1 
(SASL(-1): generic failure: All-whitespace username.) ]
 ?notice: vpn1_migrate_to_0[977276] error output [ 
ocf-exit-reason:vpn1: live migration to dzien failed: 1 ]
 ?notice: Result of migrate_to operation for vpn1 on swir: error
 ?notice: swir-vpn1_migrate_to_0:189 [ error: authentication 
failed: Failed to start SASL negotiation: -1 (SASL(-1): 
generic failure: All-whitespace 
username.)\nocf-exit-reason:vpn1: live migration to dzien 
failed: 1\n ]
 ?notice: Result of stop operation for vpn1 on swir: ok

Can you shed more light on what virsh/libvirt says there?
many thanks, L.