mc/sg A.11.18 new install on hpux 11iv2

[Marvin Tapessur_1]

I've done a couple of these installs and never encountered this before. I'm at the beginning of the config stage and after running:

cmquerycl -v -L /dev/vgora01 -C $SGCONF/jdecluster.config -n host1 -n host2

I get:

Looking for other clusters ... Done
Gathering storage information
Unable to connect to node nlnwgu01: Permission denied
Unable to connect to node nlnwgu02: Permission denied
Gathering network information
Beginning network probing
Not probing node nlnwgu01 as it is currently unreachable.
This may cause network partitions to be reported.
Not probing node nlnwgu02 as it is currently unreachable.
This may cause network partitions to be reported.
Completed network probing
Failed to gather configuration information.


I can assure you identd is running and cmclnodelist is configured correctly.

The only error I get in the syslog is:

host1 cmclconfd[25706]: Received 0 bytes from identd on 127.0.0.1.

My /etc/hosts file is also configured with the IP's of all the nics of both hosts.

Any clue what is happening or not happening here?

[Svetoslav Gyurov]

Hi,

Well, probably you missed something. Are you sure the nodes are resolved by the same name you have specified in cmclnodelist.Have you specified FQDN in hosts files ? What about nsswitch.conf file, is it configured and how ?

--
sve

[Mridul Shrivastava]

cmclnodelist in not required in MC/SG 11.18.

Check the nslookup o/p on both nodes using IP and hostname and see if it resolves the name properly.

check the permission of the files present under /etc/cmcluster on both the nodes.

[whiteknight]

Marvin,

refer to this SG security file.
http://docs.hp.com/en/6283/SGsecurityfiles.pdf

yes, cmnodelist is one of the suggestion.

WK

[Sajjad Sahir]

can u send the ouput of
cmcheckconf -v -C /etc/cmcluster/cmcluster.ascii(u ascii filename)

[Sajjad Sahir]

Dear Marvin
sorry it was by mistake I posted previous thread. leave it that one

[Sajjad Sahir]

can u check the command
in the following syntax
cmquerycl -v -C /etc/cmcluster/jdecluster.config -n host1 -n host2

[Marvin Tapessur_1]

Thank you all for helping me with this.

Resolving is ok. I've used fqdn and aliases. see below:

127.0.0.1 localhost loopback
10.235.100.11 host01.acme.corp host01
10.235.100.12 host02.acme.corp host02
192.168.132.11 host01.acme.corp host01
192.168.132.12 host02.acme.corp host02

The nsswitch.conf file should also be ok:

hosts: files [NOTFOUND=continue UNAVAIL=continue] dns [NOTFOUND=return UNAVAIL=return]

the cmclnodelist is needed for initial config which then can be removed is using role based security. Below the cmclnodelist file contents:

host01 root
host02 root

Sajjad,

Running the cmquerycl without the lock disk paramater gives me the exact same output/error.

Is this not related to identd? According to the error in syslog no data was received by the ident daemon.



Any other suggestions?

[Mridul Shrivastava]

>> whiteknight

The doc you provided is for A.11.16 or older ones, however Marvin is using A.11.18 hence I don't think cmclnodelist is relevant in his case.

[Steve Lewis · Accepted solution]

Did you set any parameters in identd ?
You may need to add -i
Then don't forget to inetd -c

Other ideas:
Have you used /var/adm/inetd.sec ?
If so, you will have to tailor it.

Have you commented out any hacl... services in /etc/services?

If you use cmclnodelist then also add 127.0.0.1 root and all the other IP addresses that you want to use (e.g. heartbeat lans etc). Do this on all nodes.

Set the permissions of cmclnodelist to 644 on all nodes.

Check the contents of /etc/rc.config.d/cmcluster
- you will have to change that eventually anyway.

[Marvin Tapessur_1]

Finally, thank you Steve.

It was the inetd.sec file. There was a global deny no the authd service.

Thanks all!!

[Marvin Tapessur_1]

See previous comment