permissions denied when try to configure SG 11.18

[AdminSyS]

Hello,

I get the bellow error when running:

# cmcheckconf -v -C /etc/cmcluster/YAS1270.conf
Begin cluster verification...
Checking cluster file: /etc/cmcluster/YAS1270.conf
Checking nodes ... Permission denied to 10.186.7.210
Permission denied to 127.0.0.1
Done
Checking existing configuration ... Done
Node f28pxya1 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
f28pxya1 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node f28pxya1 resolves the IP address correctly.
cmcheckconf: Failed to gather configuration information

I already checked /etc/hosts file and it is configured correctly. what can be the problem.
Please help.

[Doug O'Leary]

Hey;

One of the more entertaining issues.

1. Ensure hosts resolve forward and back - hosts resolve to the same hostname and IPs resolve back to the original hostnames.

2. Verify /etc/resolv.conf, /etc/nsswitch.conf, and /etc/hosts are all the same.

3. Verify that /etc/cmcluster/cmclnodelist file is updated and the same on both nodes.

4. ssh from one node to the other and verify that the target system is resolving the source system's IP correctly (a subset of #2, I guess)

5. Verify that identd is set correctly in /etc/services and /etc/inetd.conf

Usually, after running through those issues a few times, I get the thing working correctly.

Hope that helps.

Doug

[Rita C Workman]

Is this a new configuration?

Did you put the nodename in the cmclnodelist file? >> you need to do this when you first create to add nodes, afterwards you don't need this file.

Just a thought,
Rita

[AdminSyS]

Yes I updated cmclnodelist file
should it contain only the primary name of the nodes or the backup and hearth-beat names as well?

[AdminSyS]

when I try to ssh one system to another it is asking for root pass
maybe this is my problem? is the cluster communication running through ssh? if so how do I set it not to ask for pass?

[Rita C Workman]

Heartbeat is just a simple network connection between the nodes to check/ensure the nodes are running and can communicate. You do not need to add this information into the cmclnodelist.

The cmclnodelist is the list of all nodes to be included into the cluster - only. And you only need this initially to create the cluster.

I'm not sure what you mean by 'backup'.

TIP: It is sometimes easiest to create a single-node cluster and then add your nodes into the new cluster after the single-node cluster is up and running.

Regards,
Rita

[AdminSyS]

how do I create a single node and then join the second node to it?