Cluster Creation failures with SG A11.16

[suryanarayana_1]

Hello All,
The cluster creation fails with the error below while executing cmcheckconf:

# cmcheckconf -C cmclconf.ascii

Begin cluster verification...

Error: Error performing security validation. Please verify that identd is running properly.
Error: Unable to connect to node indica: Software caused connection abort
Error: Volume Group /dev/vgnms is not found on any nodes in the cluster.
Error: Volume Group /dev/vgdb is not found on any nodes in the cluster.
Error: Volume Group /dev/vgosscore is not found on any nodes in the cluster.
Error: Volume Group /dev/vgmessage is not found on any nodes in the cluster.
Error: Volume Group /dev/vgosscore2 is not found on any nodes in the cluster.
Error: Volume Group /dev/vgnww is not found on any nodes in the cluster.
Error: Volume Group /dev/vgrac is not found on any nodes in the cluster.
Error: Volume Group /dev/vgrep is not found on any nodes in the cluster.
Error: Volume Group /dev/vgmvi is not found on any nodes in the cluster.
Warning: Not probing node indica as it is currently unreachable.
This may cause network partitions to be reported.
cmcheckconf : Unable to reconcile configuration file cmclconf.ascii
with discovered configuration information.
#

We enabled debugging information of Identd in inetd.conf and then it writes the following message in syslog:

# Apr 27 11:01:55 indica identd[6313]: identd: remote owner request failed : No such file or directory
Apr 27 11:01:55 indica identd[6313]: Returned: 62786 , 5302 : NO-USER

This is how we configured identd in inetd.conf:
# grep ident /etc/inetd.conf
ident stream tcp wait bin /usr/lbin/identd identd -l -d
#

Below is the swlisting of SG installed on the server:

# swlist -l fileset Cluster-Monitor
# Initializing...
# Contacting target "indica"...
#
# Target: indica:/
#

# Cluster-Monitor A.11.16.00 HP Cluster Monitor
Cluster-Monitor.CM-CORE A.11.16.00 Cluster Monitor CORE
Cluster-Monitor.CM-CORE-MAN A.11.16.00 Cluster Monitor MAN pages
## swlist -l patch Cluster-Monitor
# Initializing...
# Contacting target "indica"...
#
# Target: indica:/
#

# Cluster-Monitor A.11.16.00 HP Cluster Monitor
# Cluster-Monitor.CM-CORE A.11.16.00 Cluster Monitor CORE
PHSS_32731.CM-CORE 1.0 Cluster Monitor CORE applied
# Cluster-Monitor.CM-CORE-MAN A.11.16.00 Cluster Monitor MAN pages
PHSS_32731.CM-CORE-MAN 1.0 Cluster Monitor MAN pages applied
#

Do you have any clues on this? If so please throw some light on this.

Thanks,
Surya.

[Duncan Edmonstone]

Surya,

Please read ITRC knowledge base article UXSGKBAN00001174 which discusses patch levels for Serviceguard, identd and ARPA that are pertinent to this problem.

Also please make sure you have created the /etc/cmcluster/cmclnodelist on all cluster nodes with at least an entry for root on all cluster nodes. Note that cmclnodelist is *only* used for cluster createion in 11.16 - thereafter you use directives in the cluster conf files to control security.

HTH

Duncan

[suryanarayana_1]

Hello Duncan,

We have automated scripts which will create the script based on the user defined configurations. This automation also takes care of generating cmclnodelist file before creating the cluster configuration.

I checked the file and looks okay.

Can you please let me know the link for the article you mentioned in your previous mail. I am unable to access it using the number.

Thanks,
Surya.

[melvyn burnard · Accepted solution]

I suggest you take a read of the following documents:

http://docs.hp.com/en/6283/SGsecurityfiles.pdf

http://docs.hp.com/en/5874/securingserviceguard.pdf

and the release notes

http://docs.hp.com/en/B3935-90078/B3935-90078.pdf

This may help explain the symptoms to you.

If you do not have a system contract handle associated with your ITRC login, then you will not be able to retrieve the document listed by Duncan.

[Geoff Wild]

Why not set ident to default, create the cluster - then try setting it back?

Default is:

# grep ident /etc/inetd.conf
#ident stream tcp wait bin /usr/lbin/identd identd


run
inetd -c
after modifying inetd.conf

Rgds...Geoff