cmquery error

[AnthonySN]

im getting the below error when running cmquerycl.
GOLDEN#cmquerycl -C /etc/cmcluster/ouic.asc -n golden -n silver
Warning: Unable to determine local domain name for GOLDEN
Node golden is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
golden through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node golden resolves the IP address correctly.
Failed to gather configuration information.

Attached is the output of hosts, .rhosts, cmclnodelist (also tried added + in this file)

[Mridul Shrivastava]

Does the same entried exist on SILVER and cmclnodelist and ascii file present on both servers.

Try nslookup using hostname and IP address from both the nodes for the other node and see if gives the correct info.

[Stephen Doud]

Use this document to help you:

http://docs.hp.com/en/6283/SGsecurityfiles.pdf

[AnthonySN]

hi mridul,
instead of manually editing the files (hosts,cmclnodelist etc) i have scpied the files to the other node.

[Stephen Doud]

Several causes have been seen...

1) Serviceguard commands require hpux 'inetd' or linux 'xinetd'. To see if
inetd/xinetd is servicing Serviceguard daemons, test with:

# telnet localhost 5302

If it does not respond, check inetd/xinetd

HPUX:
Insure these lines show up in /etc/inetd.conf:
hacl-probe stream tcp nowait root /opt/cmom/lbin/cmomd /opt/cmom/lbin/cmomd -f /var/opt/cmom/cmomd.log -r /var/opt/cmom
hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

Restart inetd:
# inetd -k
# inetd (-l)
# netstat -a | grep hacl
tcp 0 0 *.hacl-cfg *.* LISTEN
tcp 0 0 *.hacl-probe *.* LISTEN
tcp 0 0 localhost.51137 localhost.hacl-cfg TIME_WAIT


LINUX:
By default xinetd is not installed. Look for /etc/xinetd.d/ . If it
doesn't exist, install the xinetd rpm.

xinetd enables use of the 'pidentd' daemon which is required to authenticate
Serviceguard commands. Example:
# rpm -qa | grep ident
pidentd-3.0.15sg-1

If not installed, do so and enable it to run:
# /sbin/chkconfig --level 35 identd on
# /etc/init.d/identd start

For SUSE Linux Enterprise Server 9:
# /sbin/insserv identd
# /etc/init.d/identd start
--------------------------------------------------------------------------------
2) As of Serviceguard version A.11.16, the 'cmclnodelist' file must exist in
the cluster configuration directory on each host intended to be a member of
the cluster.
For HPUX, the directory is /etc/cmcluster
For LINUX, the directory is /usr/local/cmcluster/conf/

For HPUX, the file format is akin to .rhosts. Example:

tic root
toc root

Note the use of simple hostnames.

Alternatively, use the actual IP of the servers to expedite the
authentication function. Example:

16.113.32.42 root
16.113.32.43 root

NOTE: EVERY node must be listed in every cmclnodelist!

--------------------------------------------------------------------------------
3) The error occured because an old cluster binary file existed in the cluster
configuration directory on the other node and there was no cluster binary on
the node where the configuration command was executed. Removing the invalid
cluster binary file permitted the cmapplyconf to operate.

[AnthonySN]

1)have checked the /etc/inetd.conf and found the three lines uncommented.

2)cmclnodelist does exist on both nodes as in the attached file.

nslookup does resolve hostname and vice versa.

3)it is a new cluster so there will be no traces of an old cluster file.

any other workaround ?

[AnthonySN]

We need to give the same case letters (in my case upper case) of the hostname in the cmquerycl command as the output returned by hostname command.
Thanks all for the support.