topic Re: Error after upgrading servicegaurd to 11.16 in Operating System - HP-UX

Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Mon, 11 Aug 2008 11:46:59 GMT

config: hpux 11.11/Rp7410/npar/2node cluster.

After upgrading serviceguard version to 11.14 to 11.16, I am contineusly getting following error messages in syslog file.

Aug 11 18:05:00 ram1 cmclconfd[17361]: cmclconfd running with weak security (identd disabled).

Pls help me to resolve this...

Regards,
Sudhakar.

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Mon, 11 Aug 2008 12:10:19 GMT

this is because there were changes made in SG A.11.16, and which were available as patches to A.11.14 and A.11.15, which enhanced SG security.
You need to check your networking config and enable identd rather than authd
Take aread of:
http://docs.hp.com/en/6283/SGsecurityfiles.pdf
and
http://docs.hp.com/en/5874/securingserviceguard_nov2005.pdf

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Mon, 11 Aug 2008 12:27:13 GMT

Hi Melvyn,

We are already gone through this documents.

Pls see my inetd.conf file.

still I am getting error messages on both the nodes of clusrer.

Regards,
Sudhakar

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Mon, 11 Aug 2008 12:42:47 GMT

Here is your problem:
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c -i
and
hacl-probe stream tcp nowait root /opt/cmom/lbin/cmomd /opt/cmom/lbin/cmomd -i -f /var/opt/cmom/cmomd
There should not be the -i option

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Mon, 11 Aug 2008 13:01:52 GMT

In rolling upgrades, after upgrading to 11.16 in one node, while running #cmrunnode -v we are getting error messages .As per docs we disabled idend by putting -i option in inetd.conf.

Attaching syslog shot.

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Mon, 11 Aug 2008 13:26:28 GMT

well if you are in the middle of a rolling upgrade, this could be expected, due to the changes, and possible network differences in the two versions.
Your syslog is showing that there are networmk issues that should be investigated.

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Tue, 12 Aug 2008 05:58:42 GMT

That means , Now upgradation is complete. can i remove -i from inetd.conf?

Regards,
Sudhakar

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Tue, 12 Aug 2008 07:23:29 GMT

If you have finished the rolling upgrade, i.e. ALL nodes are at 11.16, then yes you shoul dremove those -i settings.

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Tue, 12 Aug 2008 09:14:58 GMT

Hi,

After removing -i in inetd.conf, still we are getting same error messages.

Is there any patch?

Regards,
Sudhakar

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Tue, 12 Aug 2008 09:17:35 GMT

Wheather system requires reboot after removing -i option?

Regards,

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Tue, 12 Aug 2008 09:40:11 GMT

did you do an inetd -c?
And which specific errors are you stil getting.
You should make sure you have the latest SG patch for A.11.16
PHSS_36898 and PHSS_32734

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Tue, 12 Aug 2008 10:02:53 GMT

Aug 12 16:29:15 ram1 cmclconfd[21189]: cmclconfd running with weak security (identd disabled)

same error after removing -i and inetd -c.

but there is a line in inetd.conf
#ident stream tcp wait bin /usr/lbin/identd identd

can we remove # ?

I will down load and install these patches.

Regards,
Sudhakar

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Tue, 12 Aug 2008 10:14:52 GMT

yes, that means identd is commented out an dNOT in use.
You should remove the comment and redo inetd -c

Re: Error after upgrading servicegaurd to 11.16

SUDHAKAR_18 — Tue, 12 Aug 2008 10:43:38 GMT

After removing # ,I am getting error while using cmviewcl.

(root)(ram1):/home/hcl>cmviewcl -v

CLUSTER STATUS
dbappscl up

NODE STATUS STATE
ram0 up running
cmviewcl : Unable to determine the number of network interfaces on ram0.
Cluster may be reforming. Try again.

NODE STATUS STATE
ram1 up running
cmviewcl : Unable to determine the number of network interfaces on ram1.
Cluster may be reforming. Try again.

what may be the problem? After putting # and -i above problem solved, but weak security error is still generating.

Regards,

Re: Error after upgrading servicegaurd to 11.16

melvyn burnard — Tue, 12 Aug 2008 10:51:58 GMT

you appear to possibly have networking issues witrh name resolution etc.
Sounds like it is time to log a call with your local HP Response Centre