topic Re: getting error while running cmgetconf as root in Operating System - HP-UX

getting error while running cmgetconf as root

jeevarajkn — Thu, 04 Feb 2010 14:59:15 GMT

Dear All

OS-11.23
Service guard version- A.11.18.00

getting error while running cmgetconf as root.

uaedxbpdctakp01>cmgetconf -c TAKAFLDB -p pkg1 /tmp/test.ascii
cmgetconf: User root from node uaedxbpdctakp01 is not authorized to execute
this command on cluster TAKAFLDB. Consult your cluster
administrator to obtain appropriate privileges through role-based access.
Check syslog file for more information.

How we can resolve this issue.

Reg
Jeevaraj

Re: getting error while running cmgetconf as root

smatador — Thu, 04 Feb 2010 15:28:40 GMT

Hi,
You have to grant access root to each node of the cluster. So check cmclnodelist and the RBAC
http://www.docs.hp.com/en/B9903-90054/ch05s01.html
HTH

Re: getting error while running cmgetconf as root

Fabio Ettore — Thu, 04 Feb 2010 16:08:22 GMT

Hi,

what about other SG commands like cmviewcl and cmviewconf?

Best regards,
Fabio

Re: getting error while running cmgetconf as root

jeevarajkn — Thu, 04 Feb 2010 16:15:26 GMT

Hi Fabio,

cmviewcl and cmviewconf are working fine, but all other commands like cmgetconf,cmcheckconf and cmapplyconf are not working.

Re: getting error while running cmgetconf as root

Fabio Ettore — Thu, 04 Feb 2010 16:28:29 GMT

Hi,

it sounds a problem with permission of SG commands from that cluster node, what into syslog.log?

"Check syslog file for more information."

Also what about cmgetconf executed from other nodes of the same cluster?

One thing that not sounds good to me is the long hostname.

Best regards,
Fabio

Re: getting error while running cmgetconf as root

jeevarajkn — Thu, 04 Feb 2010 16:44:11 GMT

Hi Fabio,

Its a 2 node cluster and am getting same permission error from both nodes, and about hostname my other servers is having the same length and its working fine :)...

Please find the attached syslog file messages am continuously receiving.

Re: getting error while running cmgetconf as root

Fabio Ettore — Thu, 04 Feb 2010 17:13:55 GMT

Hi,

I suggest checking syslog.log at the same moment you get the message for cmgetconf.
Try to put a debug on cmclconfd lines into /etc/inetd.conf, just add -T 5 at the end of 2 lines of cmclconfd, then inetd -c and try again cmgetconf.

>>>about hostname my other servers is having the same length and its working fine :)...

So do you have at least another cluster with nodenames so long?
If so then compare clusters configuration, working and not-working, for example about /etc/hosts. I saw sometimes this kind of issues when having not good resolution names.

HTH.

Best regards,
Fabio

Re: getting error while running cmgetconf as root

jeevarajkn — Thu, 04 Feb 2010 17:25:04 GMT

Hi,

below is the exact error message getting in syslog...

"Feb 4 21:19:20 uaedxbpdctakp02 inetd[4734]: registrar/tcp: Access denied for uaedxbpdctakp02 (10.248.8.12) at Thu Feb 4 21:19:20 2010"

So i want to comment the following entry in /etc/inetd.conf file.

hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

can I commnet and run inetd -c command online, is it make any issues in live servers.

Re: getting error while running cmgetconf as root

Fabio Ettore — Thu, 04 Feb 2010 17:37:34 GMT

Hi,

you don't have to comment them, you have to add something at the end:

hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p -T 5
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c -T 5

Then inetd -c.
This should add more detailed information about cmclconfd functions.

Best regards,
Fabio

Re: getting error while running cmgetconf as root

Sagar Sirdesai — Fri, 05 Feb 2010 04:31:29 GMT

Hi
On the affected node please check the permission of / or root home directory

Please send us the output of

ls -ld / or ls -ld

Sagar

Re: getting error while running cmgetconf as root

sujit kumar singh — Sun, 07 Feb 2010 13:50:23 GMT

hi

depending on the versin of SG that you are using you can put the Entries in the Cluster config ASCII file as
USER_NAME
USER_HOST
USER_ROLE
and grant proper permissions and do cmcheckconf and cmapplyconf using a LOGIN that has access to Cluster for modifictaion and Admin.

then give a try to see if this works and you still get the same permission denied error messgae.

Regards
Sujit