cmquerycl fails to create a new cluster file

[Dani_Galera]

Hi,

i'm trying to setup a cluster between 2 nodes. I created file:

[root@emhbssap11 conf]# pwd
/usr/local/cmcluster/conf
[root@emhbssap11 conf]# cat cmclnodelist
+

on each node. then i try to execute this:

cmquerycl -v -C $SGCONF/SAPCLUHPOS.config -w full -n emhbssap10 -n emhbssap11

but fails on both nodes with this error:

[root@emhbssap10 log]# cmquerycl -v -C $SGCONF/SAPCLUHPOS.config -n emhbssap10 -n emhbssap11 Looking for other clusters ... Done
Node emhbssap11 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
emhbssap11 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node emhbssap11 resolves the IP address correctly.
Failed to gather configuration information.
[root@emhbssap10 log]#

in the system log i found this:

Jul 17 13:46:56 emhbssap10 xinetd[3237]: EXIT: hacl-cfgudp status=0 pid=3507 duration=74(sec)

any idea?

thanks in advamce

[Steven E. Protter]

Shalom,

There were security upgrades in 11.16 SG.

Node emhbssap11 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node

That message is meaningful. The halcl-cfgupd daemon and its companion, (on hpux run by inetd.conf) need changes to permit security to work right.

If possible, migrate your cluster configuration to cmnodelist, move away from the holder security model.

SEP

[Court Campbell]

I think you need entries like this in the cmclnodelist file

emhbssap10 root
emhbssap11 root
+


From the serviceguard manual it looks as if only the plus works for allowing non-root users to run cmviewcl.

[Dani_Galera]

the problems were the ports

some were closed blocking the connection

thanks for yor help

cheers

[skt_skt]

some where?is that network?

[Serviceguard for Linux]

ports as in firewall.

I usually turn the firewall off during cluster creation & then turn it back on. The ports are listed in the docs (release notes I think).

I may have also posted an example iptables file in the past.