Serviceguard
cancel
Showing results for 
Search instead for 
Did you mean: 

cmquerycl fails to create a new cluster file

Dani_Galera
Occasional Advisor

cmquerycl fails to create a new cluster file

Hi,

i'm trying to setup a cluster between 2 nodes. I created file:

[root@emhbssap11 conf]# pwd
/usr/local/cmcluster/conf
[root@emhbssap11 conf]# cat cmclnodelist
+

on each node. then i try to execute this:

cmquerycl -v -C $SGCONF/SAPCLUHPOS.config -w full -n emhbssap10 -n emhbssap11

but fails on both nodes with this error:

[root@emhbssap10 log]# cmquerycl -v -C $SGCONF/SAPCLUHPOS.config -n emhbssap10 -n emhbssap11 Looking for other clusters ... Done
Node emhbssap11 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
emhbssap11 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node emhbssap11 resolves the IP address correctly.
Failed to gather configuration information.
[root@emhbssap10 log]#

in the system log i found this:

Jul 17 13:46:56 emhbssap10 xinetd[3237]: EXIT: hacl-cfgudp status=0 pid=3507 duration=74(sec)

any idea?

thanks in advamce
5 REPLIES
Steven E. Protter
Exalted Contributor

Re: cmquerycl fails to create a new cluster file

Shalom,

There were security upgrades in 11.16 SG.

Node emhbssap11 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node

That message is meaningful. The halcl-cfgupd daemon and its companion, (on hpux run by inetd.conf) need changes to permit security to work right.

If possible, migrate your cluster configuration to cmnodelist, move away from the holder security model.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Court Campbell
Honored Contributor

Re: cmquerycl fails to create a new cluster file

I think you need entries like this in the cmclnodelist file

emhbssap10 root
emhbssap11 root
+


From the serviceguard manual it looks as if only the plus works for allowing non-root users to run cmviewcl.
"The difference between me and you? I will read the man page." and "Respect the hat." and "You could just do a search on ITRC, you don't need to start a thread on a topic that's been answered 100 times already." Oh, and "What. no points???"
Dani_Galera
Occasional Advisor

Re: cmquerycl fails to create a new cluster file

the problems were the ports

some were closed blocking the connection

thanks for yor help

cheers
skt_skt
Honored Contributor

Re: cmquerycl fails to create a new cluster file

some where?is that network?
Serviceguard for Linux
Honored Contributor

Re: cmquerycl fails to create a new cluster file

ports as in firewall.

I usually turn the firewall off during cluster creation & then turn it back on. The ports are listed in the docs (release notes I think).

I may have also posted an example iptables file in the past.