Cluster in a Trusted System

[sivakumar_4]

We have 2 Itanium(HP-UX 11i V2) servers in Service Guard Cluster.

We converted these systems to TRUSTED SYSTEM.
After converting, the service guard is not working.

When we run 'cmruncl -v', it hangs. Even 'cmviewcl' command also hangs. But there is no error in 'syslog' and anywhere.

For trusted system, do we need any configuration in cluster ? or any thing we should do ?

Kindly help

Reg,
Sivakumar K

[Alex Lavrov.]

Hey,

According to this thread and you can trust it (gurus), it shouldn't affect the cluster.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=804151

Probably, the problem is somewhere else.

What version of SG do you use?
Are cmclnodes file i updated?

Alex.

[Sameer_Nirmal]

There is no any configuration required for Trusted nodes in SG cluster.
BTW, Which version of SG you are using?

Something has happened incidently , making trouble to SG. Most probably the problem is at network level. Check the network connect for private lan, name resolution using File,DNS etc. Most of SG command make use of name resolution to know the addresses of cluster nodes. Run nslookup command on both the nodes. Check the duplicate IP address

[Mahesh Kumar Malik]

Hi Sivakumar

Following link provides info on converting Clustered systems to trusted Mode and thus may be of help

http://docs.hp.com/en/5990-8172/ch08s11.html

Regards
Mahesh

[Devesh Pant_1]

Siva,

I did the same thing and converted a cluster to a trusted one following the document Mahesh Malik has referred to and so far things have been running fine for the past 6 months.

thanks
DP

[sivakumar_4]

Hi,

NIS and DNS are disabled in the cluster nodes. 'nslookup' also success from FILES
(i.e. from /etc/hosts)

Now I tried based on the document sent by Mahesh.
That is, Choice 1: Clusters with Private Password Databases with option-1:Converting a Nontrusted Cluster to a Trusted Cluster

But I did't succees. Our Service Guard version is A11.16.00.

Please note that, once I unconvert the nodes to non-trusted system, it is working fine. So, I am sure that the problem is around 'AUTHENTICATION'.

but I could not go further...

Reg,
Sivakumar K

[RAC_1]

Is the root account locked?? Can you log in as root on system??

If yes, what does
getprpw -m lockput root
say??

[sivakumar_4]

root account is not locked. After changing to Trusted client, I am able to login as 'root'.

[Ermin Borovac · Accepted solution]

Your issue looks remarkably similar to the one described in the following knowledge base article.

Date: 6/10/05
Document description: HP-UX 11.23 Trusted system: Serviceguard commands hang
Document id: 4000099718

[sivakumar_4]

Hi,

Problem solved.

Ermin Borovac's solution is working.

One thing, should be noted : After changing inetd.conf, restating of inetd is not enough. Restarting of cluster daemon is also required. Simply, restarting of machine is a better option.

Thanks all of you.

REg,
Sivakumar K

[sivakumar_4]

.