cmclnodelist

[SSP_1]

Hi Experts,

I want to add permission to view cluster status to some normal users. These users [10 Nos] are grouped as "sysadmin" group. Would I be able to grant a permission to a group instead of individual users.

I believe the file is "/etc/cmcluster/cmclnodelist" but after I add the users to it then also it's not happening. Any services to restart?

Please help
Shripad

[Sridhar Bhaskarla · Accepted solution]

Hi Sripad,

If you are using 11.16 version, then cmclnodelist and .rhosts entries will no more be applicable. For earlier versions, make sure you configure this file with the actual names of the servers you specified in your cluster configuration file. Try with different combinations (IP address, fully qualified domain name, short name ) and see which works. You cannot specify a group in this file. The format is " "

-Sri

[Slawomir Gora]

Hi,

You can also use sudo command to grant
a permission to a group for cmviewcl command.

[Bharat Katkar]

Shripad,
Do not add the entire group to access the CM related command..it's not recommended..
Identify couple of resposible users and add then to cmnodelist file as suggested earlier.
Regards,

[Geoff Wild]

If 11.15 or older:

In /etc/cmcluster/cmclnodelist:

servername userid

If 11.16, in the cluster ascii file:

# Example: to configure a role for user john from node noir to
# administer a cluster and all its packages, enter:
USER_NAME john
USER_HOST noir
USER_ROLE FULL_ADMIN

For monitor,

USER_ROLE monitor


Then cmapplyconf

Rgds...Geoff

[Prashant Zanwar_4]

Yes, I will also suggest the same. Try with one user first with whatsoever combinations you want to try. Work out your list of reasonable users and apply the above to it.
Thanks
Prashant

[melvyn burnard]

Have a read of the Managing Serviceguard manual available at:
http://docs.hp.com/hpux/ha
Pick the manual for the version you are running and look in the manual for the methodology of configuring non-root users to do cmviewcl

[SSP_1]

Hi All ,

Thanks a lot for your valuable support . I am able to solve the problem of cmclnodelist. It requires entries in individual ids and not in group .