cmviewcl: Permission denied to 127.0.0.1

[dictum9]

Any idea what this means?

#/etc/cmcluster#: more cmclnodelist
test1.biz.com oracle

sgtest1:/etc/cmcluster#: su - oracle

test1:pshddev:pshddev> cmviewcl -v
Permission denied to 127.0.0.1

[James R. Ferguson · Accepted solution]

Hi:

See the Technical Knowledge Database document ID:

ucr_na-KMN8606390795_ssb-1 .

Regards!

...JRF...

[Sandman!]

Could you post the output of the following cmds:

# netstat -in
# lanscan

~thanks

[Denver Osborn]

What rev of MC/SG? If you're at 11.16 then add an access control policy for the user.

If you're at 11.16, it's really nothing more than vi cmclconfig.ascii followed by cmcheckconf and cmapplyconf.

Have a look at this post for info re: setup of access control policy...
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1007673

-denver

[tsf_1]

Is this refer to ServiceGuard A.11.13? There is this known issue:

Patch PHSS_29120 introduced behavior that can result in
ServiceGuard commands failing with permission denied for
the loopback address if IP addresses, rather than
hostnames, are used in the /etc/cmcluster/cmclnodelist
file. For example:

# cmruncl -v
Error: Permission denied to 127.0.0.1
Warning: Local node is not currently configured in a cluster

If this is the case, "PHSS_30742 s700_800 11.X MC/ServiceGuard and SG-OPS Edition A.11.13" should help to resolve the error.

[Ludovic Derlyn]

hi,

if i look a man cmviewcl, i see :

To view cluster information, a user must either be a superuser with
effective user ID of zero (see id(1) and su(1)), or have an access
policy of MONITOR allowed in the cluster configuration file, or have a
policy of PACKAGE_ADMIN in a package's configuration file. See access
policy in cmquerycl(1) or cmmakepkg(1).

it's configured for you ?

I have also encountered this problem, with identd

check the cmclconfd entry in /etc/inetd.conf to appear as: hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd \ cmclconfd -c -i

Regards

L-DERLYN

[dictum9]

#: netstat -in
IPv4:
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lan0:1 1500 139.85.181.0 139.85.181.134 3291 0 3185 0 0
lan3 1500 192.168.0.0 192.168.0.1 157262 0 300827 0 0
lan1 1500 10.133.0.0 10.133.0.106 2513338 0 5897169 0 0
lan0 1500 139.85.181.0 139.85.181.108 2259744 0 4269685 0 316
lo0 4136 127.0.0.0 127.0.0.1 65411 0 65411 0 0
lan4* 1500 none none 0 0 0 8427 9722

IPv6:
Name Mtu Address/Prefix Ipkts Opkts
lo0 4136 ::1/128 119964 119964
lan4* 1500 none 0 0


#: lanscan
Hardware Station Crd Hdw Net-Interface NM MAC HP-DLPI DLPI
Path Address In# State NamePPA ID Type Support Mjr#
0/0/0/0 0x00306E0C6A24 0 UP lan0 snap0 1 ETHER Yes 119
0/6/0/0/4/0 0x001083F8F947 1 UP lan1 snap1 2 ETHER Yes 119
0/6/0/0/5/0 0x001083F8D9F2 2 UP lan2 snap2 3 ETHER Yes 119
0/6/0/0/6/0 0x001083F88A6C 3 UP lan3 snap3 4 ETHER Yes 119
0/6/0/0/7/0 0x001083F88A64 4 UP lan4 snap4 5 ETHER Yes 119
0/6/2/0 0x00306E03AE2A 5 UP lan5 snap5 6 ETHER Yes 119

[dictum9]

Apparently #/etc/cmcluster/cmclnodelist is no longer supported in SG A.11.17?

[dictum9]

The solution is to modify the main sG configuration file in /etc/cmcluster and add lines like this:

USER_NAME
USER_HOST
USER_ROLE


Then save the file and run

cmapplyconf -f -C

[corinne haesaerts]

OK,

this is a really old post, but I haven't seen a full response, so here's some extra info ...

make sure you have a correct /etc/nsswitch.conf file ...

starting with 11.17 (I think), there is an /etc/cmcluster/cmclfiles2check file which lists which files you need to look out for. Also, sgmgrweb has an easy setup tool that checks your environment for a correct setup.