topic Re: Service guard in Operating System - HP-UX

Service guard

samuel fatoye — Wed, 19 Mar 2003 18:07:45 GMT

Starting to create my first cluster config but
get error with the cmclquery command persmission denied

Begin checking the nodes...
Error: Permission denied to 127.0.0.1
Looking for other clusters ... Done
Error: Unable to establish communication to node sapsolm1
Failed to gather configuration information.

How can i correct the error to the loopback address.

Thank you

Re: Service guard

Jeff Schussele — Wed, 19 Mar 2003 18:22:37 GMT

Hi Samuel,

Several things to check...

1) Make sure you can resolve the short hostnames of all cluster members. Having all members in /etc/hosts as well DNS is recommended.

2) Check your /etc/hosts file for proper entries - like
127.0.0.1 localhost loopback
111.222.111.222 hostname1 hostname.company.com
111.222.111.223 hostname2.company.com

etc......

3) MC/SG also needs either a .rhosts or cmclnodelist file of the form
hostname1 root
hostname2 root

etc...

HTH,
Jeff

Re: Service guard

Jeff Schussele — Wed, 19 Mar 2003 18:25:02 GMT

Sorry, that second host entry in /etc/hosts should look like

111.222.111.223 hostname2 hostname2.company.com

Jeff

Re: Service guard

Sridhar Bhaskarla — Wed, 19 Mar 2003 18:57:34 GMT

Hi Samuel,

As indicated by Jeff, you will need to have either .rhosts or cmclnodelist that includes the localhost.

#cd ~/root
#cat .rhosts
host1 root
host2 root

or

#cd /etc/cmcluster
#cat cmclnodelist

host1 root
host2 root

For security reasons, maintaining cmclnodelist is preferred.

-Sri

Re: Service guard

samuel fatoye — Thu, 20 Mar 2003 11:43:45 GMT

Dear Gurus,

Thank you for the suggestions. I have the necceary enteries on /etc/hosts file and ./rhosts . I can perform rlogin without passowrd from nodeA and nodeB.
I don't have the cmclnodelist file but created one as suggested. But the error still occurs .I think there must some other simply reason. Knowing well I am new to this I open to your suggestion.

Many thanks

- on the path to learning about service guard.

Samuel

Re: Service guard

Rita C Workman — Thu, 20 Mar 2003 13:24:52 GMT

Samual,

In your .rhosts file do you have ALL the hosts/nodes involved listed. Now that means on NodeA you must also have NodeA listed in your .rhosts file..same for others.
You must have ALL nodes listed in every .rhost file.

You need to only do the .rhosts -OR- the cmclnodelist...NOT BOTH.

Just a thought,
Rita

Re: Service guard

Michael Steele_2 — Thu, 20 Mar 2003 13:44:11 GMT

What Jeff, Rita and the others have suggested should be followed. Failing this, reboot both of your servers since something may be locked up. If this fails rerun your set_parms command and check your LAN settings.

set_parms initial

...and verify and remake your LAN configuration files.

This problem appears to be confined to LAN 0 and not your 2ndary LANS.

Re: Service guard

Sridhar Bhaskarla — Thu, 20 Mar 2003 18:30:51 GMT

Hi,

As I indicated before, you would need either .rhosts or cmclnodelist and the later takes precedence if both exist.

Since you are still getting the permission denied error, you may want to look at your syslog.log to see if there are any more errors.

One another place I would check is /var/adm/inetd.sec. Make sure you are not disallowing hacl-cfg. Look in /etc/inetd.conf for these entries as well.

If you enable connection logging of inetd using "inetd -l" option, you will get more details.

-Sri

Re: Service guard

Michael Burbury — Thu, 20 Mar 2003 22:04:21 GMT

Hi,

Check inetd.conf on each node for:

hacl-probe stream tcp nowait root /opt/cmom/lbin/cmomd cmomd -f /var/opt/
cmom/cmomd.log
hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

When I installed the A11.13 MC Service Guard on one of my nodes, the "configure" scripts didn't appear to have run from the depot install.