cmquerycl checks what on the cluster ? how to fire up sgmgr on hpux11i?

[Sammy_2]

Trying to configure 2 node cluster on hpux 11i (ver 1) with Serviceguard 11.16. Also have installed RAC.
1) I installed Servicecontrol manager as well but don't see the binary file to "/opt/sgmgr/*". does it not
get installed in /opt/sgmgr. Any one know why ?
# ==> swlist |grep -i service
B3935DA A.11.16.00 Serviceguard
B7609BA A.04.00.02 Event Monitoring Service
B8339BA B.03.00.09.02 servicecontrol manager Server and Agent Bundle
B8465BA A.02.00.05 HP WBEM Services for HP-UX
T1859BA A.11.16.00 Serviceguard Extension for RAC

# ==> ls -ld /opt/sgmgr
/opt/sgmgr not found
ojrdhes3:/opt ==>


2) what does cmquerycl check so it will not give me an error and create a dummy ascii file?
I don't have heartbeat crossover cable between 2 nodes yet? Is that a requirement for cmquery ?
What else I need to check (hardware wise ) so cmquecyl is successful

ojrdhes3:/opt ==> cmquerycl -C escripttest.ascii -n node1 -n node2

Error: Permission denied to 127.0.0.1
Error: Permission denied to 10.108.35.74
Warning: Unable to determine local domain name for ojrdhes3
Error: Node ojrdhes3 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
ojrdhes3 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node ojrdhes3 resolves the IP address correctly.
Failed to gather configuration information.

[vinod_25]

hi Sam

There are several possible causes for this problem.

Serviceguard commands access hacl-cfg ports listed in
/etc/services and services by inetd via cmclconfd in /etc/inetd.conf.

# grep hacl-cfg /etc/services
hacl-cfg 5302/tcp # HA Cluster TCP configuration
hacl-cfg 5302/udp # HA Cluster UDP configuration

# grep hacl-cfg /etc/inetd.conf
hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

Insure inetd is servicing these ports:
# netstat -a | grep hacl
tcp 0 0 *.hacl-probe *.* LISTEN
tcp 0 0 *.hacl-cfg *.* LISTEN
tcp 0 0 localhost.56448 localhost.hacl-cfg TIME_WAIT
udp 0 0 *.hacl-cfg *.*

Consider cycling inetd in case the ports aren't active:
# inetd -c
# grep hacl /syslog | tail -10

If a line appears having a current time stamp, it's likely the service was
dead or inactive previously. Try the Serviceguard command again to see if
the problem is resolved.

Serviceguard commands require permission from other nodes in order to work.
In pre-11.16 clusters, and if /etc/cmcluster/cmclnodelist is present
on any node, it will be consulted for authorization to run Serviceguard
commands - even if run from the node itself. If that file doesn't exist,
~/.rhosts will be consulted. For nodes running Serviceguard before
version 11.16, insure one of these files exists, and permits ALL nodes in the
cluster to operate Serviceguard commands (ALL nodes must be listed).
Example file:
node1 root
node2 root
Note that both hostnames are listed. Also note that IPs are not used.



"Edited to comply with ITRC Guidelines"

Regards

Vinod K

[Luk Vandenbussche]

Hi,

Have you installed al the latest patches for SG A.11.16 ?

http://www.docs.hp.com/en/B3935-90078/B3935-90078.pdf

[melvyn burnard · Accepted solution]

1) I installed Servicecontrol manager as well but don't see the binary file to "/opt/sgmgr/*". does it not
get installed in /opt/sgmgr.


No, Service Control Manager is NOT Serviceguard Manager, and so does not get installed in /opt/sgmgr, but goes into /opt/mx
Do swlist -l file |grep ServControlMgr for more details

To get Serviceguard Manager, go here and choose the correct OS that you wish to install it on:
https://h20293.www2.hp.com/portal/swdepot/try.do?productNumber=B8325BA


2) what does cmquerycl check so it will not give me an error and create a dummy ascii file?

Well to create an initial configuration you need a cmclnodelist in /etc/cmcluster on both nodes, containing the information for both hosts, allowing root access.


Please read the folowing for more details:

http://docs.hp.com/en/5874/securingserviceguard.pdf

http://docs.hp.com/en/6283/SGsecurityfiles.pdf

http://docs.hp.com/en/B3935-90078/B3935-90078.pdf

and finally
page 182 of http://docs.hp.com/en/B3936-90079/B3936-90079.pdf

[Sammy_2]

I am going to install sg patches and will post the result in couple of days after I run cmquery again.
I checked the items Vinod suggested and I have those.
Melvyn, Thanks. I installed SGmanager and now I see the /opt/sgmgr folder. Thanks for the docs. They are really helpful
Luk, you are right , I may have to install PHSS_32731 for sg.
Thanks all.
Will let know you how it goes.

[Brad Marshall_2]

In your services file, make sure you have port 113 as ident not auth as it is 11.00.
ident 113/tcp authentication #