eoor while running cmquerycl

[kashyapi]

Hi Guys,
I have installed MC/SG A.11.19.00 on HP-UX 11.31.While i am running cmquerycl in one of the two nodes(hpux60 and hpux65)..i am getting following message.

Node hpux60 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
hpux60 through either file-based authorization(pre-A.11.16 version) or
access control policies (version A.11.16 or higher) and/or that the host name lookup on node hpus65
resolves the IP address correctly.
Failed to gather configuration information.

Could you please hep me.

Thanks

[Prashanth.D.S]

Hi,

Make sure both nodes are updated in .rhosts file ..

Best Regards,
Prashanth

[DeafFrog]

hi binni,

Make sure that nslookup resolves both ways on both the sevvers , check the /etc/hosts fles and the /etc/cmcluster/cmclnodelist has correct entry.

Regards,

[Stephen Doud]

Serviceguard has security features that require attention in certain system files.
The best thing you can do is educate yourself about them. Please use pages 197-201 in the following manual:
"Managing Serviceguard Seventeenth Edition, First Reprint December 2009"
at http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02057890/c02057890.pdf

Also note that /etc/services and /etc/inetd.conf should contain certain network services that Serviceguard requires:
hacl
identd (a.k.a. auth)
registrar

[kashyapi]

Hi Prashant/DeafFrog,

Thanks for your suggession.

i have already made entry in .rhosts and /etc/cmcluster/cmclnodelist .After that i am getting this message.

[SUDHAKAR_18]

problem with your /etc/hosts.

please attach /etc/hosts from both the nodes.

this is a known issue, problem with /etc/hosts or improper entry.

[Prashanth.D.S]

Hi,

There could be various reasons for this issue..

1. Check permissions for /etc/services & /etc/inetd.conf

2. Verify the hacl-cfg entries in /etc/inetd.conf

hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c

3. Since you have already mentioned that cmclnodelist is done, i would suggest run a hostname command and compare both ..

cmclnodelist entry should be as mentioned below..
hostname root

ensure both nodes have the same.

4. Ensure /etc/hosts file has ip address of either nodes.

5. Check /etc/nsswitch.conf and make sure its searching "files" first.

6. At last try restarting inetd

#inetd -k
#/sbin/init.d/inetd start

Also check the syslog.log entries for errors when cmquerycl was run, it would give more info as to what is causing this issue.

Best Regards,
Prashanth

[Chandrahasa s]

Hi,
If you attach following output from both server we can certainly help for some extend.

a)cat /etc/hosts
b)netstat -nvr ""
c)cat /etc/cmcluster/cmclnodelist "
d)ls -l /etc/cmcluster/cmclnodelist
e)cat /etc/inetd.conf
f)cat /etc/lvmrc
g)cat /etc/rc.config.d/cmcluster


Chandra

[kashyapi]

Below output i am providing for your info
For both the node ..
# cat /etc/cmcluster/cmclnodelist
hux48.in.reach.com root
hux49.in.reach.com root
#
# cat /etc/inetd.conf|grep -v "#"

ftp stream tcp6 nowait root /usr/lbin/ftpd ftpd -l
telnet stream tcp6 nowait root /usr/lbin/telnetd telnetd


tftp dgram udp wait root /usr/lbin/tftpd tftpd\
/opt/ignite\
/var/opt/ignite
login stream tcp6 nowait root /usr/lbin/rlogind rlogind
shell stream tcp6 nowait root /usr/lbin/remshd remshd
exec stream tcp6 nowait root /usr/lbin/rexecd rexecd
ntalk dgram udp wait root /usr/lbin/ntalkd ntalkd
auth stream tcp6 wait bin /usr/lbin/identd identd

printer stream tcp nowait root /usr/sbin/rlpdaemon rlpdaemon -i

daytime stream tcp6 nowait root internal
daytime dgram udp6 nowait root internal
time stream tcp6 nowait root internal
echo stream tcp6 nowait root internal
echo dgram udp6 nowait root internal
discard stream tcp6 nowait root internal
discard dgram udp6 nowait root internal
chargen stream tcp6 nowait root internal
chargen dgram udp6 nowait root internal

kshell stream tcp6 nowait root /usr/lbin/remshd remshd -K
klogin stream tcp6 nowait root /usr/lbin/rlogind rlogind -K




swat stream tcp nowait.400 root /opt/samba/bin/swat swat
recserv stream tcp nowait root /usr/lbin/recserv recserv -display :0
registrar stream tcp6 nowait root /etc/opt/resmon/lbin/registrar /etc/opt/resmon/lbin/registrar
instl_boots dgram udp wait root /opt/ignite/lbin/instl_bootd instl_bootd
hacl-probe stream tcp nowait root /opt/cmom/lbin/cmomd /opt/cmom/lbin/cmomd -f /var/opt/cmom/cmomd.log -r /var/opt/cmom
hacl-cfg dgram udp6 wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp6 nowait root /usr/lbin/cmclconfd cmclconfd -c

# cat /etc/hosts|grep -v "#"

127.0.0.1 localhost loopback
10.12.16.20 hux48.in.reach.com hux48
10.12.16.21 hux49.in.reach.com hux49
#

Please help me to troubleshoot.

[likid0]

You are getting something mixed up, you are pasting your config:


# cat /etc/cmcluster/cmclnodelist
hux48.in.reach.com root
hux49.in.reach.com root
#


And in the first error description you are reporting different hostnames:

Node hpux60 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
hpux60 through either file-based authorization(pre-A.11.16 version) or
access control policies (version A.11.16 or higher) and/or that the host name lookup on node hpus65


Please, check it out

[kashyapi]

Sorry for the wrong communication.It was typo.System name hux48 and hux49.You can avoid the first hpux60 name.

[Chandrahasa s · Accepted solution]

HI
Remove
10.12.16.20 hux48.in.reach.com hux48
10.12.16.21 hux49.in.reach.com hux49
from /etc/hosts of both nodes

put below entry on /etc/hosts of both nodes
10.12.16.20 hux48
10.12.16.21 hux49
************************
ping both servers
ping hux48
ping hux49
***********************
edit /etc/cmcluster/cmclnodelist on both nodes as
hux48 root
hux49 root

attach cmquerycl output if problem repeates.

Chandra

[kashyapi]

Appreciate all of your valuable response.I have made below entry in /etc/hosts, cmclnodelists

hux48 root
hux49 root


Still i was having the issue.Then i have assigned hostname without FQDN ie hux48/hux49 in both the system and then issue is resolved.

My special thanks to Chandra.

[kashyapi]

This issue is resolved.We should not use FQDN while configuring Cluster.