HA without rlogin

[Massimo_20]

Can i use/configure Service Guard without using rlogin??

Thanks in advance.

[melvyn burnard · Accepted solution]

yes you can

[Massimo_20]

Ok, Thanks.

How can i do it?

Bye

[melvyn burnard]

I do not understand your question.
when configuring or using Serviceguard, rlogin is not used, so it is not required

[Massimo_20]

OK.

I have a cluster and r-service is configured. Now, if i unconfigured r-service, what i must to do so that the custer to go on work well?

Thanks.

[melvyn burnard]

nothing
Serviceguard does not use rlogin, rsh etc

[Massimo_20]

But, i remember that if i have not the r-service and the .rhost corretly configured, than i try to run cmapplyconf it not work.

I also remember that it's possible use the cmclnodelist....

Can you help me to clear up it?

Thanks in advance.

[Tim D Fulford]

/etc/cmcluster/cmnodelist

This is in effect the .rhosts for serviceguard. You do not need .rhosts

Regards

Tim

[melvyn burnard]

do not use .rhosts, use the cmclnodelist file for configuring SG, asnd as from 11.16 of SG once a cluster is configured it does not use cmclnodelist or .rhosts
As per the managing Serviceguard manual available at
http://docs.hp.com/en/ha

[Massimo_20]

I have 11.15, i hope it's all the same.

Bye

[melvyn burnard]

11.15 with a patch has the new security stuff in it, but still uses cmclnodelist.
For you information, 11,15 on HP-UX went out of support in June this year and on HP-UX 11.23 goes out of support the end of this month
See:
http://docs.hp.com/en/5971/SG-SGeRAC-EMS-Support.pdf

[John Bigg]

Just to clarify this for you and others, although Serviceguard can use .rhosts this is completely independent of requiring any r-services i.e. you could setup .rhosts for Serviceguard to work, disable all remsh, rlogin, rexec and other commands and your cluster would be fine.

However, as Melvyn stated, you should really use /etc/cmcluster/cmclnodelist instead as a safer solution. Note that at 11.16 this file is only used to initially create the cluster. Once the cluster is created the security is provided by the access control policies in the cluster binary file and cmclnodelist and .rhosts are simply not used from then on.