Serviceguard

Re: getting error while running cmgetconf as root

 
jeevarajkn
Frequent Advisor

getting error while running cmgetconf as root

Dear All

OS-11.23
Service guard version- A.11.18.00

getting error while running cmgetconf as root.

uaedxbpdctakp01>cmgetconf -c TAKAFLDB -p pkg1 /tmp/test.ascii
cmgetconf: User root from node uaedxbpdctakp01 is not authorized to execute
this command on cluster TAKAFLDB. Consult your cluster
administrator to obtain appropriate privileges through role-based access.
Check syslog file for more information.

How we can resolve this issue.

Reg
Jeevaraj
10 REPLIES 10
smatador
Honored Contributor

Re: getting error while running cmgetconf as root

Hi,
You have to grant access root to each node of the cluster. So check cmclnodelist and the RBAC
http://www.docs.hp.com/en/B9903-90054/ch05s01.html
HTH
Fabio Ettore
Honored Contributor

Re: getting error while running cmgetconf as root

Hi,

what about other SG commands like cmviewcl and cmviewconf?

Best regards,
Fabio
WISH? IMPROVEMENT!
jeevarajkn
Frequent Advisor

Re: getting error while running cmgetconf as root

Hi Fabio,

cmviewcl and cmviewconf are working fine, but all other commands like cmgetconf,cmcheckconf and cmapplyconf are not working.
Fabio Ettore
Honored Contributor

Re: getting error while running cmgetconf as root

Hi,

it sounds a problem with permission of SG commands from that cluster node, what into syslog.log?

"Check syslog file for more information."

Also what about cmgetconf executed from other nodes of the same cluster?

One thing that not sounds good to me is the long hostname.

Best regards,
Fabio
WISH? IMPROVEMENT!
jeevarajkn
Frequent Advisor

Re: getting error while running cmgetconf as root

Hi Fabio,

Its a 2 node cluster and am getting same permission error from both nodes, and about hostname my other servers is having the same length and its working fine :)...

Please find the attached syslog file messages am continuously receiving.
Fabio Ettore
Honored Contributor

Re: getting error while running cmgetconf as root

Hi,

I suggest checking syslog.log at the same moment you get the message for cmgetconf.
Try to put a debug on cmclconfd lines into /etc/inetd.conf, just add -T 5 at the end of 2 lines of cmclconfd, then inetd -c and try again cmgetconf.


>>>about hostname my other servers is having the same length and its working fine :)...

So do you have at least another cluster with nodenames so long?
If so then compare clusters configuration, working and not-working, for example about /etc/hosts. I saw sometimes this kind of issues when having not good resolution names.

HTH.

Best regards,
Fabio
WISH? IMPROVEMENT!
jeevarajkn
Frequent Advisor

Re: getting error while running cmgetconf as root

Hi,

below is the exact error message getting in syslog...

"Feb 4 21:19:20 uaedxbpdctakp02 inetd[4734]: registrar/tcp: Access denied for uaedxbpdctakp02 (10.248.8.12) at Thu Feb 4 21:19:20 2010"

So i want to comment the following entry in /etc/inetd.conf file.

hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

can I commnet and run inetd -c command online, is it make any issues in live servers.
Fabio Ettore
Honored Contributor

Re: getting error while running cmgetconf as root

Hi,

you don't have to comment them, you have to add something at the end:

hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p -T 5
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c -T 5

Then inetd -c.
This should add more detailed information about cmclconfd functions.

Best regards,
Fabio
WISH? IMPROVEMENT!
Sagar Sirdesai
Trusted Contributor

Re: getting error while running cmgetconf as root

Hi
On the affected node please check the permission of / or root home directory

Please send us the output of

ls -ld / or ls -ld

Sagar