how to execute 'cmviewcl' without root

[weilai]

user1 is not root.
how to execute cmviewcl with user1?

[Matti_Kurkela]

Which version of ServiceGuard?

With version 11.16 and above, you must define a security policy in either the cluster configuration file or in the package configuration file to allow non-root users to even view the ServiceGuard status. See the newest "Managing ServiceGuard" book (available in docs.hp.com) for details.

With older versions, create a file named /etc/cmcluster/cmclnodelist if it does not exist. The syntax is similar to a .rhosts file, with one added feature: a single plus sign on the last line of the file will allow everyone on that host to use cmviewcl.

Remember also that the cmviewcl command is located in /usr/sbin, which is probably not in the PATH for normal users: you might want to create a symbolic link or a small wrapper script in some location that is in user's PATH that calls the real cmviewcl command.

[Ivan Krastev]

Another option is to use sudo and permit for that user/group acess to cmviewcl command as root.

regards,
ivan

[Rita C Workman]

If you have version 11.16 or later of MC/SG.
Go into your cluster ascii file and look for "Access Control Policy section"
You can add a few simple lines here to give other folks different levels of access to MC/SG commands. Say you want the Oracle account (i.e. DBA's) to be able to monitor ONLY the cluster using cmviewcl, you would add the following lines below that section:

USER_NAME oracle
USER_HOST CLUSTER_MEMBER_NODE
USER_ROLE MONITOR

Then run your cmcheckconf, and if it's good you would cmapplyconf your cluster ascii file. You can do this with the cluster up and running.

Rgrds,
Rita