topic Re: eoor while running cmquerycl in Operating System - HP-UX

eoor while running cmquerycl

kashyapi — Wed, 22 Sep 2010 08:23:09 GMT

Hi Guys,
I have installed MC/SG A.11.19.00 on HP-UX 11.31.While i am running cmquerycl in one of the two nodes(hpux60 and hpux65)..i am getting following message.

Node hpux60 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
hpux60 through either file-based authorization(pre-A.11.16 version) or
access control policies (version A.11.16 or higher) and/or that the host name lookup on node hpus65
resolves the IP address correctly.
Failed to gather configuration information.

Could you please hep me.

Thanks

Re: eoor while running cmquerycl

Prashanth.D.S — Wed, 22 Sep 2010 09:56:51 GMT

Hi,

Make sure both nodes are updated in .rhosts file ..

Best Regards,
Prashanth

Re: eoor while running cmquerycl

DeafFrog — Wed, 22 Sep 2010 10:22:46 GMT

hi binni,

Make sure that nslookup resolves both ways on both the sevvers , check the /etc/hosts fles and the /etc/cmcluster/cmclnodelist has correct entry.

Regards,

Re: eoor while running cmquerycl

Stephen Doud — Wed, 22 Sep 2010 11:17:08 GMT

Serviceguard has security features that require attention in certain system files.
The best thing you can do is educate yourself about them. Please use pages 197-201 in the following manual:
"Managing Serviceguard Seventeenth Edition, First Reprint December 2009"
at http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02057890/c02057890.pdf

Also note that /etc/services and /etc/inetd.conf should contain certain network services that Serviceguard requires:
hacl
identd (a.k.a. auth)
registrar

Re: eoor while running cmquerycl

kashyapi — Wed, 22 Sep 2010 11:30:24 GMT

Hi Prashant/DeafFrog,

Thanks for your suggession.

i have already made entry in .rhosts and /etc/cmcluster/cmclnodelist .After that i am getting this message.

Re: eoor while running cmquerycl

SUDHAKAR_18 — Wed, 22 Sep 2010 14:22:16 GMT

problem with your /etc/hosts.

please attach /etc/hosts from both the nodes.

this is a known issue, problem with /etc/hosts or improper entry.

Re: eoor while running cmquerycl

Prashanth.D.S — Wed, 22 Sep 2010 21:52:48 GMT

Hi,

There could be various reasons for this issue..

1. Check permissions for /etc/services & /etc/inetd.conf

2. Verify the hacl-cfg entries in /etc/inetd.conf

hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

3. Since you have already mentioned that cmclnodelist is done, i would suggest run a hostname command and compare both ..

cmclnodelist entry should be as mentioned below..
hostname root

ensure both nodes have the same.

4. Ensure /etc/hosts file has ip address of either nodes.

5. Check /etc/nsswitch.conf and make sure its searching "files" first.

6. At last try restarting inetd

#inetd -k
#/sbin/init.d/inetd start

Also check the syslog.log entries for errors when cmquerycl was run, it would give more info as to what is causing this issue.

Best Regards,
Prashanth

Re: eoor while running cmquerycl

Chandrahasa s — Thu, 23 Sep 2010 15:25:57 GMT

Hi,
If you attach following output from both server we can certainly help for some extend.

a)cat /etc/hosts
b)netstat -nvr ""
c)cat /etc/cmcluster/cmclnodelist "
d)ls -l /etc/cmcluster/cmclnodelist
e)cat /etc/inetd.conf
f)cat /etc/lvmrc
g)cat /etc/rc.config.d/cmcluster

Chandra

Re: eoor while running cmquerycl

kashyapi — Fri, 24 Sep 2010 09:46:37 GMT

Below output i am providing for your info
For both the node ..
# cat /etc/cmcluster/cmclnodelist
hux48.in.reach.com root
hux49.in.reach.com root
#
# cat /etc/inetd.conf|grep -v "#"

ftp stream tcp6 nowait root /usr/lbin/ftpd ftpd -l
telnet stream tcp6 nowait root /usr/lbin/telnetd telnetd

tftp dgram udp wait root /usr/lbin/tftpd tftpd\
/opt/ignite\
/var/opt/ignite
login stream tcp6 nowait root /usr/lbin/rlogind rlogind
shell stream tcp6 nowait root /usr/lbin/remshd remshd
exec stream tcp6 nowait root /usr/lbin/rexecd rexecd
ntalk dgram udp wait root /usr/lbin/ntalkd ntalkd
auth stream tcp6 wait bin /usr/lbin/identd identd

printer stream tcp nowait root /usr/sbin/rlpdaemon rlpdaemon -i

daytime stream tcp6 nowait root internal
daytime dgram udp6 nowait root internal
time stream tcp6 nowait root internal
echo stream tcp6 nowait root internal
echo dgram udp6 nowait root internal
discard stream tcp6 nowait root internal
discard dgram udp6 nowait root internal
chargen stream tcp6 nowait root internal
chargen dgram udp6 nowait root internal

kshell stream tcp6 nowait root /usr/lbin/remshd remshd -K
klogin stream tcp6 nowait root /usr/lbin/rlogind rlogind -K

swat stream tcp nowait.400 root /opt/samba/bin/swat swat
recserv stream tcp nowait root /usr/lbin/recserv recserv -display :0
registrar stream tcp6 nowait root /etc/opt/resmon/lbin/registrar /etc/opt/resmon/lbin/registrar
instl_boots dgram udp wait root /opt/ignite/lbin/instl_bootd instl_bootd
hacl-probe stream tcp nowait root /opt/cmom/lbin/cmomd /opt/cmom/lbin/cmomd -f /var/opt/cmom/cmomd.log -r /var/opt/cmom
hacl-cfg dgram udp6 wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp6 nowait root /usr/lbin/cmclconfd cmclconfd -c

# cat /etc/hosts|grep -v "#"

127.0.0.1 localhost loopback
10.12.16.20 hux48.in.reach.com hux48
10.12.16.21 hux49.in.reach.com hux49
#

Please help me to troubleshoot.

Re: eoor while running cmquerycl

likid0 — Fri, 24 Sep 2010 09:57:10 GMT

You are getting something mixed up, you are pasting your config:

# cat /etc/cmcluster/cmclnodelist
hux48.in.reach.com root
hux49.in.reach.com root
#

And in the first error description you are reporting different hostnames:

Node hpux60 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
hpux60 through either file-based authorization(pre-A.11.16 version) or
access control policies (version A.11.16 or higher) and/or that the host name lookup on node hpus65

Please, check it out

Re: eoor while running cmquerycl

kashyapi — Fri, 24 Sep 2010 10:30:33 GMT

Sorry for the wrong communication.It was typo.System name hux48 and hux49.You can avoid the first hpux60 name.

Re: eoor while running cmquerycl

Chandrahasa s — Sun, 26 Sep 2010 13:04:29 GMT

HI
Remove
10.12.16.20 hux48.in.reach.com hux48
10.12.16.21 hux49.in.reach.com hux49
from /etc/hosts of both nodes

put below entry on /etc/hosts of both nodes
10.12.16.20 hux48
10.12.16.21 hux49
************************
ping both servers
ping hux48
ping hux49
***********************
edit /etc/cmcluster/cmclnodelist on both nodes as
hux48 root
hux49 root

attach cmquerycl output if problem repeates.

Chandra

Re: eoor while running cmquerycl

kashyapi — Fri, 08 Oct 2010 05:13:27 GMT

Appreciate all of your valuable response.I have made below entry in /etc/hosts, cmclnodelists

hux48 root
hux49 root

Still i was having the issue.Then i have assigned hostname without FQDN ie hux48/hux49 in both the system and then issue is resolved.

My special thanks to Chandra.

Re: eoor while running cmquerycl

kashyapi — Fri, 08 Oct 2010 05:26:40 GMT

This issue is resolved.We should not use FQDN while configuring Cluster.