SG 11.18. cmclconfd[]: Permission denied for root

[Pavlo Zhuk]

Hi,

I have rx3600 servers, and want to configure 2 cluster nodes.

HP-UX 11.23
ServiceGuard 11.18.0

During configuration check I can see error:

# cmcheckconf -k -v -C /etc/cmcluster/cluster.conf
Begin cluster verification...
Checking cluster file: /etc/cmcluster/cluster.conf
Checking nodes ... Done
Checking existing configuration ... Done
Node ussdg2_A is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
ussdg2_A through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node ussdg2_A resolves the IP address correctly.
cmcheckconf: Failed to gather configuration information

And syslog show this error:

# tail -5 syslog.log
Jan 17 17:07:07 ussdg2_A inetd[6197]: rpc.cmsd/udp: Added service, server /usr/dt/bin/rpc.cmsd
Jan 17 17:07:07 ussdg2_A inetd[6197]: rpc.ttdbserver /tcp: Added service, server /usr/dt/bin/rpc.ttdbserver
Jan 17 17:07:07 ussdg2_A inetd[6197]: Configuration complete
Jan 17 17:07:13 ussdg2_A cmclconfd[6199]: Permission denied for root@ussdg2_A (RBA)
Jan 17 17:07:29 ussdg2_A cmclconfd[6207]: Permission denied for root@ussdg2_A (RBA)

I have checked name resolve on both nodes:


# nslookup 10.44.2.21
Using /etc/hosts on: ussdg2_A

looking up FILES
Name: ussdg2_A
Address: 10.44.2.21

# nslookup ussdg2_A
Using /etc/hosts on: ussdg2_A

looking up FILES
Name: ussdg2_A
Address: 10.44.2.21

# cat /etc/nsswitch.conf
hosts: files dns

# cat /etc/hosts
# @(#)B11.23_LRhosts $Revision: 1.9.214.1 $ $Date: 96/10/08 13:20:01 $

10.44.2.21 ussdg2_A
10.44.2.22 ussdg2_B
127.0.0.1 localhost loopback

Also, .rhosts and cmclnodelist had been created:

#cat /.rhosts
127.0.0.1 root
10.44.2.21 root
10.44.2.22 root

# cat /etc/cmcluster/cmclnodelist
ussdg2_A root
ussdg2_B root
10.44.2.21 root
10.44.2.22 root
127.0.0.1 root

identd is running on port 113/TCP
HP ServiceGuard daemons exist in inetd.conf and running. Ports ate listened and NOT filetered.

HP Bastille is NOT installed.

Please, advice, what to do.

Thanks.

[Pavlo Zhuk]

In addition:

HPSS_37094 had been installed, but it doesn't help to resolve the problem.

[Ivan Krastev · Accepted solution]

Please ensure that reverse resolving is working on the both nodes.


regards,
ivan

[Pavlo Zhuk]

Ivan,

Thanks for answer.

Direct and reverse resolve is working:

# nslookup 10.44.2.21
Using /etc/hosts on: ussdg2_A

looking up FILES
Name: ussdg2_A
Address: 10.44.2.21

# nslookup ussdg2_A
Using /etc/hosts on: ussdg2_A

looking up FILES
Name: ussdg2_A
Address: 10.44.2.21


Or may be I misundersand what you mean? How to check reverse resolve?

[Pavlo Zhuk]

Problem still exists...Need help! :(

[Hasan Atasoy]

hi pavlo ;

look at inetd.conf file , identd must be enabled ( there is no # at the beginning of the file ) . open it and inetd -c

Hasan

[Pavlo Zhuk]

identd is running, enabled from inetd.conf

[Ivan Krastev]

On the both nodes check:

nslookup 10.44.2.21
nslookup 10.44.2.22


regards,
ivan

[Pavlo Zhuk]

Yes, Reverse resolve is working on both node correctly. Direct resolve is working as well.

[Hasan Atasoy]

run

/sbin/init.d/cmcluster start

on both nodes and try again.


Hasan