Node is refusing Serviceguard communication

[David Willams]

cmquerycl -v -C /etc/cmcluster/cmclconfig.ascii -n rx86-1p0 -n rx86-1p1
Permission denied to 127.0.0.1
Looking for other clusters ... Done
Node rx86-1p0 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
rx86-1p0 through either file-based authorization(pre-A.11.16 version) or
access control policies (version A.11.16 or higher)
and/or that the host name lookup on node rx86-1p0
resolves the IP address correctly.
Failed to gather configuration information.


[rx86-1p0]/etc/cmcluster
# ll
total 112
drwxr-xr-x 2 bin bin 8192 May 13 2009 cfs
-rw-r--r-- 1 root sys 46 Dec 23 04:15 cmclnodelist
-r--r--r-- 1 root root 524 Dec 9 2008 cmignoretypes.conf
-r-------- 1 bin bin 118 Dec 9 2008 cmknowncmds
-rw-r--r-- 1 root root 667 Dec 9 2008 cmnotdisk.conf
dr-xr-xr-x 2 bin bin 96 May 13 2009 examples
dr-xr-xr-x 2 bin bin 8192 May 13 2009 lib
dr-xr-xr-x 5 bin bin 96 May 13 2009 modules
dr-xr-xr-x 6 bin bin 8192 May 13 2009 scripts
[rx86-1p0]/etc/cmcluster
# cat cmclnodelist
16.118.114.33 rx86-1p1
16.118.114.32 rx86-1p0
[rx86-1p0]/etc/cmcluster
#

[sujit kumar singh]

Hi


/etc/cmclnodelist hsd the format of

node1 root
node2 root



regards
sujit

[sujit kumar singh]

the location of the file is


/etc/cmcluster/nodelist

and the entries are:

You may want to add a comment such as the following at the top of the file:
###########################################################
# Do not edit this file!
# Serviceguard uses this file only to authorize access to an
# unconfigured node. Once the node is configured,
# Serviceguard will not consult this file.
###########################################################
The format for entries in cmclnodelist is as follows:
#<BR />For example:<BR />gryf root #cluster1, node1<BR />sly root #cluster1, node2<BR />bit root #cluster1, node3<BR />This example grants root access to the node on which this cmclnodelist file resides<BR />to root users on the nodes gryf, sly, and bit.<BR /><BR /><BR />or you can try setting /.rhosts or /etc/hosts.equiv<BR /><BR />regards<BR />sujit<BR />regards<BR />sujit

[melvyn burnard · Accepted solution]

The format for /etc/cmcluster/cmclnodelist is the same as that of .rhosts
You need to make sure all relevant entries are inserted to allow this to work.
Take a read of:
http://docs.hp.com/en/6283/SGsecurityfiles0903.pdf
and
http://docs.hp.com/en/6283/SGsecurityfiles0903.pdf

[David Willams]

# cmquerycl -v -C /etc/cmcluster/cmclconfig.ascii -n rx86-1p0 -n rx26-236
Permission denied to 16.118.114.155
Looking for other clusters ... Done
Node rx26-236 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
rx26-236 through either file-based authorization(pre-A.11.16 version) or
access control policies (version A.11.16 or higher)
and/or that the host name lookup on node rx26-236
resolves the IP address correctly.
Failed to gather configuration information.
[rx86-1p0]/etc/cmcluster
# ll
total 112
drwxr-xr-x 2 bin bin 8192 May 13 2009 cfs
-r--r--r-- 1 root root 524 Dec 9 2008 cmignoretypes.conf
-r-------- 1 bin bin 118 Dec 9 2008 cmknowncmds
-rw-r--r-- 1 root root 667 Dec 9 2008 cmnotdisk.conf
dr-xr-xr-x 2 bin bin 96 May 13 2009 examples
dr-xr-xr-x 2 bin bin 8192 May 13 2009 lib
dr-xr-xr-x 5 bin bin 96 May 13 2009 modules
-rw-r--r-- 1 root sys 28 Dec 23 04:53 nodelist
dr-xr-xr-x 6 bin bin 8192 May 13 2009 scripts
[rx86-1p0]/etc/cmcluster
# cat nodelist
rx86-1p1 root
rx26-236 root
[rx86-1p0]/etc/cmcluster

cat /etc/hosts

16.118.114.32 rx86-1p0.usa.hp.com rx86-1p0
127.0.0.1 localhost loopback
16.118.114.155 rx26-236.usa.hp.com rx26-236

[David Willams]

# swlist|grep Serviceguard
B5140BA A.11.31.04 Serviceguard NFS Toolkit
T1905CA A.11.19.00 Serviceguard

[David Willams]

I get the same error again, where else do I need to make changes please

[melvyn burnard]

firstly, you have the wrong filename, it should be cmclnodelist.
You also need to make sure that this file is duplicated onto the other node

Secondly, start of simple by just inclduing your local host to see if that works, then add in the second node.

you also need to make sure that the identd entry in /etc/inetd.conf is not commented out

[David Willams]

Thanks Melvin that worked

# cmquerycl -v -C /etc/cmcluster/cmclconfig.ascii -n rx86-1p0 -n rx26-236
Looking for other clusters ... Done
Gathering storage information
Found 85 devices on node rx86-1p0
Found 15 devices on node rx26-236
Analysis of 100 devices should take approximately 9 seconds
0%----10%----20%----30%----40%----50%----60%----70%----80%----90%----100%
Found 1 volume groups on node rx86-1p0
Found 1 volume groups on node rx26-236
Analysis of 2 volume groups should take approximately 1 seconds
0%----10%----20%----30%----40%----50%----60%----70%----80%----90%----100%
Note: Disks were discovered which are not in use by either LVM or VxVM.
Use pvcreate(1M) to initialize a disk for LVM or,
use vxdiskadm(1M) to initialize a disk for VxVM.
Gathering network information
Beginning network probing
Completed network probing

Node Names: rx26-236
rx86-1p0




and then when I do cmviewcl I get the following error

[rx86-1p0]/
# cmviewcl
cmviewcl: Cannot view the cluster configuration: No such file or directory.
Either this node is not configured in a cluster, user doesn't have
access to view the cluster configuration, or there is some obstacle
to viewing the configuration. Check the syslog file for more information.
For a list of possible causes, see the Serviceguard manual for cmviewcl.

[David Willams]

thanks