auth service

[Efraim G]

Hi,
I'm installing serviceguard in an itanium server with HP-UX 11.23
When running "cmquerycl -v -C /etc/cmcluster/hpsg01.config -n jerry" I got the message:
Error: Node jerry is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
jerry through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node jerry resolves the IP address correctly.
Failed to gather configuration information.

host.equiv, .rhosts and hosts files are configured properly.

I think that the problem is with the auth service. It doesn't run when the server starts up but is configured in inetd.conf:
auth stream tcp wait bin /usr/lbin/identd identd

In the syslog I got:
Jul 29 13:29:40 jerry inetd[2940]: auth/tcp: Unknown service

Any idea?

[James R. Ferguson]

Hi:

Make sure that your '/etc/services' contains:

ident 113/tcp authentication

...The 'auth' service is a deprecated name for 'ident'.

Regards!

...JRF...

[skt_skt]

here is what i have
:root [/root] uname -a
HP-UX hostname B.11.23 U ia64 1539718563 unlimited-user license

tned33n:root [/root] grep auth /etc/inetd.conf
auth stream tcp6 wait bin /usr/lbin/identd identd
tned33n:root [/root] grep auth /etc/services
auth 113/tcp authentication # Authentication Service
tned33n:root [/root] telnet tned33n 113
Trying...
Connected to tned33n.adr.alcoa.com.
Escape character is '^]'.

telnet> close
Connection closed.


if you still have problem try this entry as JRF also suggested.

rep auth /etc/services
ident 113/tcp authentication # RFC1413

Still the problem exists modify the hacl-cfg entry (stream/tcp) entry as below whihc will bypass/avoid the coomunication/authentication happening using identd.i had implemented this in one of our HP-UX 11.11 cluster.

hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c -i


BTW , what sendmail version do you have?

[Efraim G]

Hi,
nsswitch.conf filer was not configured to search in the /etc/services filer.
Thanks.

[skt_skt]

Could u paste "cat /etc/nsswitch.conf". The default config file does not look for services.

[Efraim G]

There was nos nsswithc.conf at all, this was confusing because most of the services and other stuff worked fine (even nis).