Man Page ,MC/Service Guard ,NIS and IP Forwarding

[Sundar_7]

Guys,

* I was wondering where I can get the man page of /usr/lbin/getprpw & /usr/lbin/modprpw

I didnt try out HP Man Page PDF..it might be there..but I would like to have it online.

Also I have some Questions ..I have some idea on those things.

But I would like to know whether I am right or wrong

* In MC/Service Guard Cluster Config File there are 3 parameters

NODE TIME OUT

HEART BEAT INTERVAL

and NETWORK POLLING INTERVAL..

Fine..I do understand the first two params.but what about Network polling interval,does it mean to check all the lan cards within the node ?

* Can we use NIS in a wan environment..I know there are lot of security issues and also nis clients broadcast never going to cross gateways.but I can always set the nis server's ip address in the nis client using ypset option then will it be possible ? (neglecting the security issues )

* About ip_forwarding. I know how to set it using ndd or nettune..

But ..U can always have an routing table entry. why to enable ip_forwarding.

I can guess ip_forwarding is enabled in the kernel and so obviously be fast,but if U disable ip_forwarding then I can obviously have some filter rule kinda setup as I believe we are having a control of the routing when this ip_forwarding is disabled..

So I would like to know what are the advantages of enabling IP_FORWARDING rather than setting up a route table entry..

* Also ifalias never works in HP-UX 10.20.
I know there are some ifalias patches available. But then I believe patches are there just to fix up the bugs but it fails to do the very basic thing it supposed to.

It never works..

Expecting atleast some 2-3 postings for my queries..

Thanks

Sundar
SundarHP@Hotmail.Com

[JACQUET]

Answering about MC/SG :

Here is the explanation of the NETWORK_POOLING_INTERVAL in the cluster configuration file :

Network Polling Interval
The frequency at which the networks configured for MC/ServiceGuard are checked. The current default is 2 seconds. Thus every 2 seconds, the cluster manager polls each network interface to make sure it can still send and receive information. Changing this value can affect how quickly a network failure is detected.

In the ASCII cluster configuration file, this parameter is NETWORK_POLLING_INTERVAL, and its value is entered in microseconds.

PJA.

[Carsten Krege]

Jacquet is right. The reason why SG does the network polling is that the lan drivers cannot reliably detect all errors. So SG uses additionally to the notification of the lan driver a network polling mechanism (on DLPI level, similar but not identical to linkloop) that ensures that lan interfaces are able to send and receive.

Carsten

[Praveen Bezawada]

Hi
If a unix box is configured as IP forwarding enabled, it can act as a router.Unless your system has multiple network interfaces and is actually supposed to work as a router, it's advisbale to turn it off . Hosts that forward packets can be forced to make external plackets appear to have come from inside the network and this can cause unwanted packets evade network scanners and filters.

...BPK...

[Carsten Krege]

# catman -w
# man -k getprpw
getprpwent, getprpwuid, getprpwnam, getprpwaid, setprpwent, endprpwent, putprpwn
am(3) - manipulate protected password database entries (for trusted systems only).
# man getprpwent
....
SEE ALSO
authcap(4), getpwent(3C), getprdfent(3), prpwd(4), ttsyncd(1M), nis+(1).


There doesn't exist a man page for these commands. The path /usr/lbin indicates that these binaries are not intended for explicit use.

Carsten

[James R. Ferguson]

Hi Sundara:

Actually, there *are* man pages available:

For 'getprpw' see:

http://docs.hp.com/hpux/onlinedocs/B2355-90691/B2355-90691.html

For 'modprpw' see:

http://docs.hp.com/hpux/onlinedocs/B2355-90691/B2355-90691.html

The man pages for both *do note* that "This command is intended for SAM use only. It may change with each release and can not be guaranteed to be backward compatible.".

This underscores Carsten's caution above.

Regards!

..JRF...

[Carsten Krege]

Thx, James, for the correction. :)

Carsten

[Rumen Ginev]

Hi Sundara,

About ifalias:
We have two HP-UX 10.20 servers and ifalias works fine on both. But it is patched with PHNE_12492.
If you can not make it work you may use ifconfig. I even think ifalias is not supported in 11.00.

Rumen