cmclconfd warning

[Gary_Yeh]

I have use serviceguard, in One host syslog always occur below message, but the other host don't happen

Jan 17 12:43:46 TYGERP03 cmclconfd[23240]: Permission denied for user root on no
de 172.17.3.5 (RBA)
Jan 17 12:43:46 TYGERP03 cmclconfd[23240]: WARNING: User root from ip address 17
2.17.3.5 does not have privileges to access this node. Either they are coming f
rom a node without enhanced security or somebody may be attempting un-authorize
d access to this system.

[Sameer_Nirmal]

Check the file /etc/cmcluster/cmclnodelist on the node where you are getting the message.

Then compare the same file on the other node.

The file should be identical and only for the cluster nodes.

Maybe the file is not having entry for the other SG host.

[Carsten Krege · Accepted solution]

This is not likely to be a problem of cmclnodelist. cmclnodelist is used in SG A.11.16 and later only if a node is added to a cluster with cmapplyconf. After this SG uses the Role Based Access (RBA) rules configured in your cluster.ascii file.

First you need to determine if the node 172.17.3.5 is allowed to access your cluster. I assume it is an IP configured on one of the cluster members. If this is the case you need to correct your DNS setup. *Each* cluster node's IP address needs to be configured in /etc/hosts of all cluster members AND it needs to be configured to have at least an alias matching the hostname it lives on.

See the SG manual

http://docs.hp.com/en/B3936-90100/ch05s01.html#babcccdh

Carsten

[Gary_Yeh]

Thanks for your help, I add the ip address to /etc/hosts and checkc the syslog.log today, the error message does not happened.

[Gary_Yeh]

add on the ip address to /etc/hosts