System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

cmviewcl permission issue for normal user.

SOLVED
Go to solution
jeevarajkn
Frequent Advisor

cmviewcl permission issue for normal user.

Dear All

OS-11.23
Service guard version- A.11.18.00

getting error while running cmviewcl with normal user.

$ cmviewcl
Permission denied to 127.0.0.1
cmviewcl: Cannot view the cluster configuration: Permission denied.
This user doesn't have access to view the cluster configuration.

I have tried with other normal user also but no hopes.
As mentioned in other forums i have made the following entries in cmclnodelist and conf file.

cat /etc/cmcluster/cmclnodelist
uaedxbpdctakp01 root
uaedxbpdctakp02 root
uaedxbpdctakp01 uxgsmc
uaedxbpdctakp02 uxgsmc
+ +

and the entry in conf file is follows.
USER_NAME ANY_USER
USER_HOST CLUSTER_MEMBER_NODE
USER_ROLE PACKAGE_ADMIN

Please let me know,

Is these entries are enough as am using Service guard version- A.11.18.00.

And is it required to run cmapplyconf to apply these changes.

Please revert with your feedbacks.

Thanks

Jeev


7 REPLIES
Johnson Punniyalingam
Honored Contributor

Re: cmviewcl permission issue for normal user.

Hi ,

No need for any changes,

cmviewcl --- > command its prividlge user command meaning "Privildge user account can only view the output.

or can try using sudo ? to achieve it

Thanks,
Johnson
Problems are common to all, but attitude makes the difference
Johnson Punniyalingam
Honored Contributor

Re: cmviewcl permission issue for normal user.

Hi Jeev,

Please check below thread for more Information

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1304435


HTH,
Johnson
Problems are common to all, but attitude makes the difference
jeevarajkn
Frequent Advisor

Re: cmviewcl permission issue for normal user.

Hi Johnson,

Thanks, But this same user can view cmviewcl in my other cluster servers which is running in service guard version A.11.17.00.

Any more observations.

Thanks
Jeev

Viney Kumar
Regular Advisor

Re: cmviewcl permission issue for normal user.

Hi Jeeva,

whether you are able to run this cmd with absolute path or not ?

Matti_Kurkela
Honored Contributor
Solution

Re: cmviewcl permission issue for normal user.

The /etc/cmcluster/cmclnodelist file is used only in the cluster creation phase with Serviceguard A.11.18. After the first cmapplyconf is successful, it is ignored and the user roles specified in the cluster configuration are used instead.

>and the entry in conf file is follows.
USER_NAME ANY_USER
USER_HOST CLUSTER_MEMBER_NODE
USER_ROLE PACKAGE_ADMIN

> And is it required to run cmapplyconf to apply these changes.

Yes, any change to cluster or package configuration files must be applied with cmapplyconf. Changes to the access roles can be applied while the cluster is running.

After successfully running cmapplyconf, you can even delete the ASCII configuration files: you can always get them back with cmgetconf command. (Of course, any comments you may have written in the configuration files will be lost in this process.)

You can think of the ASCII form cluster and package configuration files as form letters used to submit change requests to the real configuration. The real configuration is in binary format: you can never edit it directly.

Serviceguard uses the cmapplyconf mechanism to ensure that important changes are done either simultaneously in all cluster nodes, or not at all: this prevents the configuration of cluster nodes from getting out of sync.

http://docs.hp.com/en/B3936-90117/ch05s01.html#cacjcidg

MK
MK
melvyn burnard
Honored Contributor

Re: cmviewcl permission issue for normal user.

use cmviewconf to see if this is actually set in teh binary:
cmviweconf |more
and go look for the three parameters USER_*
If they are not set in this output, you need to apply the changes to get it into the binary
My house is the bank's, my money the wife's, But my opinions belong to me, not HP!
jeevarajkn
Frequent Advisor

Re: cmviewcl permission issue for normal user.

Dear All,

Thnaks for the your help, Solution has worked after apply the changes.

thanks to all.