NTP service not able to start on 1 node of dual node cluster

[Kees van den Bos]

I am having a bit of problems to get NTP running on a dual node cluster. On the 1st node the NTP service is started but on 2nd node it fails to start.

Some relevant system info :

XS51:SYSTEM> prod sho prod
----------------------------------- ----------- ------------
PRODUCT KIT TYPE STATE
----------------------------------- ----------- ------------
CPQ AXPVMS CDSA V2.0-109 Full LP Installed
CPQ AXPVMS PERL V5.6-1 Full LP Installed
DEC AXPVMS DECNET_OSI V7.3-2 Full LP Installed
DEC AXPVMS DFU V3.1 Full LP Installed
DEC AXPVMS DWMOTIF V1.3-1 Full LP Installed
DEC AXPVMS FTAM V3.2-N Full LP Installed
DEC AXPVMS OPENVMS V7.3-2 Platform Installed
DEC AXPVMS OSAK V3.0-Q Full LP Installed
DEC AXPVMS TCPIP V5.4-15 Full LP Installed
DEC AXPVMS VMS V7.3-2 Oper System Installed
DEC AXPVMS WANDD V1.6-1 Full LP Installed
DEC AXPVMS WEBES V3.1-12 Platform Installed
DEC AXPVMS X25 V1.6-1 Full LP Installed
HP AXPVMS KERBEROS V2.0-6 Full LP Installed
LCMG AXPVMS LIBBZ2 V1.0-2B Full LP Installed
LCMG AXPVMS PYTHON V2.3-4B Full LP Installed
LCMG AXPVMS ZLIB V1.2-1B Full LP Installed
----------------------------------- ----------- ------------

17 items found


The operator.log shows :

%%%%%%%%%%% OPCOM 25-OCT-2005 15:21:56.73 %%%%%%%%%%%
Message from user INTERnet on SMXS52
INTERnet ACP Activate NTP Server

%%%%%%%%%%% OPCOM 25-OCT-2005 15:21:56.73 %%%%%%%%%%%
Message from user INTERnet on SMXS52
INTERnet ACP NOLISTEN Process creation success: Service - NTP

%%%%%%%%%%% OPCOM 25-OCT-2005 15:21:56.77 %%%%%%%%%%%
Message from user INTERnet on SMXS52
INTERnet ACP Error during process startup, Nolisten Service Disabled - NTP Server

%%%%%%%%%%% OPCOM 25-OCT-2005 15:21:56.77 %%%%%%%%%%%
Message from user INTERnet on SMXS52
INTERnet ACP Deactivate NTP Server

%%%%%%%%%%% OPCOM 25-OCT-2005 15:21:56.77 %%%%%%%%%%%
Message from user INTERnet on SMXS52
INTERnet ACP AUXS error during process exit Status = %CLI-E-NOCMDPROC


XS52:SYSTEM> dir/sec SYS$SPECIFIC:[TCPIP$NTP]TCPIP$NTP.CONF

Directory SYS$SPECIFIC:[TCPIP$NTP]

TCPIP$NTP.CONF;4 [TCPIP$AUX,TCPIP$NTP] (RWED,RWED,RE,)


I am running out of idea's here, please help.

[Karl Rohwedder · Accepted solution]

%CLI-E-NOCMDPROC:
The account (presumably TCPIP$NTP) cannot open its LOGIN.COM (not found, no access right...) and because it is a captive or restricted account, it fails to login.
Check the SYSUAF for the LOGIN.COM and check, if the file exists and is accessible.
And remember to check from the failing node.

regards Kalle

[Wim Van den Wyngaert]

Check this too.
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=947807

Wim

[Kees van den Bos]

I suspected before it was some security issue but i thought it was related to the NTP config file and on the 2nd node this was owned by SYSTEM account while on 1st node it was owned by TCPIP$NTP account, however when i changed this it still didn't work.
A biut foolish from me that i assumed it got that far already while it was not even able to access the LOGIN.COM.

Thanks a lot.

This must be the problem :

XS52:SYSTEM> dir SYS$SPECIFIC:[TCPIP$NTP]LOGIN.COM/sec

Directory SYS$SPECIFIC:[TCPIP$NTP]

LOGIN.COM;1 [SYSTEM] (RWED,RWED,RE,)

Total of 1 file.

XS52:SYSTEM> dir smxs51::SYS$SPECIFIC:[TCPIP$NTP]LOGIN.COM/sec

Directory SMXS51::SYS$SPECIFIC:[TCPIP$NTP]

LOGIN.COM;1 [3655,4] (RWED,RWED,RE,RE)

Total of 1 file.

Will make the change an supply the update here.

[Kees van den Bos]

Well i had the chance to change to fiel protection and restart NTP and it is running fine now, Thnx.

[Kees van den Bos]

TCPIP$NTP account LOGIN.COM file protection set for WORLD:RE

[Ian Miller.]

LOGIN.COM;1 [3655,4]
I suspect this should be owned by TCPIP$NTP not [3655,4]

[Kees van den Bos]

Yep but this is the account details :

XS52:SYSTEM> mc authorize sho tcpip$ntp

Username: TCPIP$NTP Owner: TCPIP$NTP
Account: TCPIP UIC: [3655,4] ([TCPIP$AUX,TCPIP$NTP])
CLI: DCL Tables: DCLTABLES
Default: SYS$SPECIFIC:[TCPIP$NTP]
LGICMD: LOGIN
Flags: Restricted

The UIC is the same.