single node cluster permission denied to itself

[Peter Jenssen]

I'm trying to set up a single node ServiceGuard cluster, but I'm getting a bunch of permission errors.
Permission denied for the host to talk to itself..?

cmapplyconf gives "Error: Permission denied to "
But then "Completed the cluster creation."

cmruncl then starts off normally, but then "Waiting for cluster to form" followed by "Cluster did not form. Check the syslog file for information."

cmviewcl shows the cluster up and running though.

syslog shows cluster as formed as single node followed by several lines like this:

Mar 2 09:15:45 cmclconfd[8551]: WARNING: User (root) from ip address (10.26.194.16) does not have privileges to execute command 2. Somebody may be attempting un-authorized access to this system.

The IP 10.26.194.16 is the IP of the node itself!

-What's going on here??


thanks,
Peter

[melvyn burnard]

you do not appear to have your security set properly.
Did you put an entry fo rthis server in cmclnodelist at cluster creation time? including ALL of the ip/hostanmes for the configured NIC's on tgheh ost?
Also take a read through the Security papers on the docs page:
http://docs.hp.com/en/ha choosing Serviceguard

[Peter Jenssen]

Ok, I didn't create the cmclnodelist.
I suppose I didn't think it was neccesary for a one node cluster.. :-)

So I wiped out ServiceGuard and started over,
putting root in /etc/cmcluster/cmclnodelist.

And now it doesn't even generate the config file.
"Error: Node is refusing Serviceguard communication."
And then
..-At least without the cmclnodelist I could create a cluster and start it.. ;-)

The hostname is in the .rhosts
It is also in /etc/hosts

Only one network interface is configured.

This is all very strange.
What is the mechanism used by ServiceGuard when it creates the cluster?


(We have built a couple of two node clusters before and they weren't this stubborn)


Peter

[Geoff Wild]

What are your inetd.conf settings for serviceguard?

cmclconfd

See "Editing Security Files for Serviceguard"

http://www.docs.hp.com/en/6283/SGsecurityfiles.pdf

Rgds...geoff

[Peter Jenssen]

I created the nsswitch.conf file to specify files before DNS.

Can't see why this would make a difference, because hostnames were resolving fine anyway..
But apperantly it did. :-)

This was not needed on the other clusters we built, but maybe there is some subtle version difference?


Thanks everyone

Peter