cmviewcl permission issue for normal user.

[jeevarajkn]

Dear All

OS-11.23
Service guard version- A.11.18.00

getting error while running cmviewcl with normal user.

$ cmviewcl
Permission denied to 127.0.0.1
cmviewcl: Cannot view the cluster configuration: Permission denied.
This user doesn't have access to view the cluster configuration.

I have tried with other normal user also but no hopes.
As mentioned in other forums i have made the following entries in cmclnodelist and conf file.

cat /etc/cmcluster/cmclnodelist
uaedxbpdctakp01 root
uaedxbpdctakp02 root
uaedxbpdctakp01 uxgsmc
uaedxbpdctakp02 uxgsmc
+ +

and the entry in conf file is follows.
USER_NAME ANY_USER
USER_HOST CLUSTER_MEMBER_NODE
USER_ROLE PACKAGE_ADMIN

Please let me know,

Is these entries are enough as am using Service guard version- A.11.18.00.

And is it required to run cmapplyconf to apply these changes.

Please revert with your feedbacks.

Thanks

Jeev

[Johnson Punniyalingam]

Hi ,

No need for any changes,

cmviewcl --- > command its prividlge user command meaning "Privildge user account can only view the output.

or can try using sudo ? to achieve it

Thanks,
Johnson

[Johnson Punniyalingam]

Hi Jeev,

Please check below thread for more Information

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1304435


HTH,
Johnson

[jeevarajkn]

Hi Johnson,

Thanks, But this same user can view cmviewcl in my other cluster servers which is running in service guard version A.11.17.00.

Any more observations.

Thanks
Jeev

[Viney Kumar]

Hi Jeeva,

whether you are able to run this cmd with absolute path or not ?

[Matti_Kurkela · Accepted solution]

The /etc/cmcluster/cmclnodelist file is used only in the cluster creation phase with Serviceguard A.11.18. After the first cmapplyconf is successful, it is ignored and the user roles specified in the cluster configuration are used instead.

>and the entry in conf file is follows.
USER_NAME ANY_USER
USER_HOST CLUSTER_MEMBER_NODE
USER_ROLE PACKAGE_ADMIN

> And is it required to run cmapplyconf to apply these changes.

Yes, any change to cluster or package configuration files must be applied with cmapplyconf. Changes to the access roles can be applied while the cluster is running.

After successfully running cmapplyconf, you can even delete the ASCII configuration files: you can always get them back with cmgetconf command. (Of course, any comments you may have written in the configuration files will be lost in this process.)

You can think of the ASCII form cluster and package configuration files as form letters used to submit change requests to the real configuration. The real configuration is in binary format: you can never edit it directly.

Serviceguard uses the cmapplyconf mechanism to ensure that important changes are done either simultaneously in all cluster nodes, or not at all: this prevents the configuration of cluster nodes from getting out of sync.

http://docs.hp.com/en/B3936-90117/ch05s01.html#cacjcidg

MK

[melvyn burnard]

use cmviewconf to see if this is actually set in teh binary:
cmviweconf |more
and go look for the three parameters USER_*
If they are not set in this output, you need to apply the changes to get it into the binary

[jeevarajkn]

Dear All,

Thnaks for the your help, Solution has worked after apply the changes.

thanks to all.