cmview - Error: Permission denied

[Luis Blanco]

I have a problem with one node on my cluster serviceguard. my cluster have 2 nodes. hhpux02 and hpux03.


from node hpux03
# cmviewcl

CLUSTER STATUS
cluster1 up

NODE STATUS STATE
hhpux02 up running
hpux03 up running
#

and from node hhpux02

# cmviewcl
Error: Permission denied to 128.1.247.3

CLUSTER STATUS
cluster1 up

NODE STATUS STATE
hhpux02 up running
hpux03 up running
#

[R.K. #]

Hi Luis,

Check for this file on noth nodes:
/etc/cmcluster/cmclnodelist

Check the contents and see if they are identical.

[R.K. #]

Also check the ownership of the .rhosts file.
The ownership should be:
-rw------- 1 root sys 283 Sep 19 01:40 .rhosts

[Luis Blanco]

yes..

any node in that file exist
/etc/cmcluster/cmclnodelist


also to run cmruncl in node hpux03 working fine, but in node hhpux02
# cmruncl
cmruncl : Validating network configuration...
Not probing node hpux03 as it is currently unreachable.
cmruncl : Network validation complete
Error: Cannot reach node "hpux03".
# cmviewcl
Error: Permission denied to 128.1.247.3




sdfksd file permissions are the same on both servers.
-rw-rw-rw- 1 root sys 25 Dec 10 21:33 /.rhosts


# cat /.rhosts
hhpux02 root
hpux03 root

[R.K. #]

Hi Again,

Need to check following files, probably compare with other node.

/etc/hosts
/etc/resolv.conf
/nsswitch.conf
/etc/cmcluster/cmclnodelist
/.rhosts
/etc/passwd #Ensure that the entry for the root user comes before any other entry with a UID of 0.

[R.K. #]

There can be a number of reasons for the error. So, you can open two sessions of same node. On one node run:
#tail -f /var/adm/syslog/syslog.log

And then on other session run:
#cmviewcl

Now see if any message is logged in its syslog.log related to cmclconf. This will provide a better hint on the issue.

[Stephen Doud]

This is a common problem. Unfortunately, there are several causes for the problem.
If you have a software contract, you have access to this document: emr_na-c01680756
Title: HPUX Serviceguard - Commands fail with "Unable to communicate with node ... Permission denied ..."

If this is a new cluster, create the /etc/cmcluster/cmclnodelist per the Managing Serviceguard manual at http://docs.hp.com/en/ha.html#Serviceguard

If you don't have a software support contract, adhere to the requirements called out in this document:
Securing Serviceguard, March 2009
http://docs.hp.com/en/5874/securingserviceguard0903.pdf

After modifying the servers' network files according to the document, and still seeing trouble, search the ITRC FORUM for additional causes.