cmquery error "Permission denied to 127.0.0.1"

[sbb]

# cmquerycl -v -C cfl.config -n COSMOPRD -n COSMOAPP
Permission denied to 127.0.0.1
Permission denied to 192.9.200.11
Warning: Unable to determine local domain name for COSMOPRD
Looking for other clusters ... Done
Node COSMOPRD is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
COSMOPRD through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node COSMOPRD resolves the IP address correctly.
Failed to gather configuration information.

[santy1]

May be you have not given access rights
to cmclnodelist file, and add the nodes and the nodes in hosts.equiv as well.

if the above steps wont help you, try checking the user manual for the proper patches installed as well.

[Siju Vadakkan]

1. Add folliwng entry in "/etc/cmcluster/cmclnodelist" on each node


COSMOPRD root
COSMOAPP root

2. Add following entry in "/etc/hosts"

127.0.0.1 localhost loopback

3. # more /etc/inetd.conf | grep auth
auth stream tcp6 wait root /usr/lbin/identd identd

by default it will be bin instead of root.

[radkol]

Hello,

usually those error indicate problem with resolving.
please check all nodes can resolve other nodes IP and name, it's good idea to put them in /etc/hosts.
Check also /etc/cmcluster/cmclnodelist.
But I'm pretty sure if you add all nodes with all of thier IP/names in /etc/hosts your problem will be fixed.

Cheers

[Khairy]

hi,

post output :

# nslookup COSMOPRD

let see if the above command show the hostname can be resolve by the server DNS.

It may relate to settings in /etc/nsswitch.conf

Check whether search is in order. If you set up resolve the hostname via dns, the order should be:

hosts: dns files

If not, it should be the other way around.

[sbb]

I am having SG version 11.18.
In this version we need to do an entry of "+" sign in cmclnodelist file and not the name of nodes.

[John Bigg]

You do not need to have a + for 11.18.

If it works using a + which allows access from any node, it is a wildcard, it indicates you did not include all the hostnames or host IP addresses into the cmclnodelist file or you have interface addresses on your systems which do not resolve to your hostname. Yes all of them need to resolve to the hostname (or if you have the latest patch you can have the hostname as an alias as in the older releases). This is documented.