topic Re: HA without rlogin in Operating System - HP-UX

HA without rlogin

Massimo_20 — Thu, 14 Sep 2006 04:59:01 GMT

Can i use/configure Service Guard without using rlogin??

Thanks in advance.

Re: HA without rlogin

melvyn burnard — Thu, 14 Sep 2006 05:14:11 GMT

yes you can

Re: HA without rlogin

Massimo_20 — Thu, 14 Sep 2006 05:38:30 GMT

Ok, Thanks.

How can i do it?

Bye

Re: HA without rlogin

melvyn burnard — Thu, 14 Sep 2006 05:40:42 GMT

I do not understand your question.
when configuring or using Serviceguard, rlogin is not used, so it is not required

Re: HA without rlogin

Massimo_20 — Thu, 14 Sep 2006 06:49:17 GMT

OK.

I have a cluster and r-service is configured. Now, if i unconfigured r-service, what i must to do so that the custer to go on work well?

Thanks.

Re: HA without rlogin

melvyn burnard — Thu, 14 Sep 2006 07:04:36 GMT

nothing
Serviceguard does not use rlogin, rsh etc

Re: HA without rlogin

Massimo_20 — Thu, 14 Sep 2006 07:38:11 GMT

But, i remember that if i have not the r-service and the .rhost corretly configured, than i try to run cmapplyconf it not work.

I also remember that it's possible use the cmclnodelist....

Can you help me to clear up it?

Thanks in advance.

Re: HA without rlogin

Tim D Fulford — Thu, 14 Sep 2006 07:56:54 GMT

/etc/cmcluster/cmnodelist

This is in effect the .rhosts for serviceguard. You do not need .rhosts

Regards

Tim

Re: HA without rlogin

melvyn burnard — Thu, 14 Sep 2006 07:57:36 GMT

do not use .rhosts, use the cmclnodelist file for configuring SG, asnd as from 11.16 of SG once a cluster is configured it does not use cmclnodelist or .rhosts
As per the managing Serviceguard manual available at
http://docs.hp.com/en/ha

Re: HA without rlogin

Massimo_20 — Thu, 14 Sep 2006 08:07:13 GMT

I have 11.15, i hope it's all the same.

Bye

Re: HA without rlogin

melvyn burnard — Thu, 14 Sep 2006 08:50:24 GMT

11.15 with a patch has the new security stuff in it, but still uses cmclnodelist.
For you information, 11,15 on HP-UX went out of support in June this year and on HP-UX 11.23 goes out of support the end of this month
See:
http://docs.hp.com/en/5971/SG-SGeRAC-EMS-Support.pdf

Re: HA without rlogin

John Bigg — Fri, 15 Sep 2006 03:19:29 GMT

Just to clarify this for you and others, although Serviceguard can use .rhosts this is completely independent of requiring any r-services i.e. you could setup .rhosts for Serviceguard to work, disable all remsh, rlogin, rexec and other commands and your cluster would be fine.

However, as Melvyn stated, you should really use /etc/cmcluster/cmclnodelist instead as a safer solution. Note that at 11.16 this file is only used to initially create the cluster. Once the cluster is created the security is provided by the access control policies in the cluster binary file and cmclnodelist and .rhosts are simply not used from then on.