Problem updating SRP's Installed Product Database

[Viktor Balogh]

Hello,

I want to set up a 2-node ServiceGuard environment with SRPs as HA packages. As I want to create the SRP environment as a system type private containment, swmodify seems to fail for some reasons. Here are the details:

# swlist -l bundle  HPUX11i-HA-OE HP-UX-SRP
# Initializing...
# Contacting target "rx2660"...
#
# Target:  rx2660:/
#

  HP-UX-SRP             A.03.00.002    HP-UX Secure Resource Partition and Configuration Manager
  HPUX11i-HA-OE         B.11.31.1109   HP-UX High Availability Operating Environment
#

# srp -add hp-prelak -batch -t system -service cmpt,init,admin,network,prm,provision autostart=no root_password=*** ip_address=192.168.1.7 assign_ip=no
add compartment rules succeeded
add RBAC admin role for compartment succeeded
add prm rules succeeded
copying from /etc to /var/hpsrp/hp-prelak/etc
copying from /opt to /var/hpsrp/hp-prelak/opt
copying from /sbin/init.d to /var/hpsrp/hp-prelak/etc/init.d
copying from /sbin/rc0.d to /var/hpsrp/hp-prelak/etc/rc0.d
copying from /sbin/rc1.d to /var/hpsrp/hp-prelak/etc/rc1.d
copying from /sbin/rc2.d to /var/hpsrp/hp-prelak/etc/rc2.d
copying from /sbin/rc3.d to /var/hpsrp/hp-prelak/etc/rc3.d
copying from /sbin/rc4.d to /var/hpsrp/hp-prelak/etc/rc4.d
copying from /var to /var/hpsrp/hp-prelak/var
Mounting loopback (LOFS) filesystems ...
copying newconfig directories ...
Copying run level scripts ...
Creating userdb files ...
Changing root user password...
Configuring srp user and group ids ...
Configuring sshd...
Configuring software distributor ...
Unmounting loopback (LOFS) filesystems ...
Problem updating SRP's Installed Product Database:
command "chroot /var/hpsrp/hp-prelak /usr/sbin/swmodify -u 'AONLINEJFS.*' AONLINEJFS 'Accounting.*' Accounting 'AppDiscMN.*' AppDiscMN 'AudFilter.*' AudFilter 'BLKONLY-MS.*' BLKONLY-MS 'BOOT-KBD.*' BOOT-KBD 'BOOT-MOUSE.*' BOOT-MOUSE 'CIFS-Client.*' CIFS-Client 'CM-Provider-MOF.*' CM-Provider-MOF 'CMGR.*' CMGR 'CORE-OOC.*' CORE-OOC 'Caliper.*' Caliper 'Cluster-Monitor.*' Cluster-Monitor 'Cluster-OM.*' Cluster-OM 'CompartmentLogin.*' CompartmentLogin 'ContainmentPlus.*' ContainmentPlus 'ContainmentWiz.*' ContainmentWiz 'Contrib-Tools.*' Contrib-Tools 'DEVFS.*' DEVFS 'DNPars.*' DNPars 'DRD.*' DRD 'DSAU.*' DSAU 'EMS-Config.*' EMS-Config 'EMS-Core.*' EMS-Core 'EMS-DBMon.*' EMS-DBMon 'EMS-DskMon.*' EMS-DskMon 'EMS-MIBMon.*' EMS-MIBMon 'EMSWeb.*' EMSWeb 'EVM-EventMgr.*' EVM-EventMgr 'FC-COMMON.*' FC-COMMON 'FC-FCD.*' FC-FCD 'FC-FCLP.*' FC-FCLP 'FC-FCOC.*' FC-FCOC 'FC-TACHYON-TL.*' FC-TACHYON-TL 'FCMassStorage.*' FCMassStorage 'FileSystemsWeb.*' FileSystemsWeb 'GE-DRV.*' GE-DRV 'Gated-Mrouted.*' Gated-Mrouted 'HP-APA-FMT.*' HP-APA-FMT 'HP-APA-KRN.*' HP-APA-KRN 'HP-APA-LM.*' HP-APA-LM 'HP-APA-NETMOD.*' HP-APA-NETMOD 'HP-APA-RUN.*' HP-APA-RUN 'HP-Caliper-PMUD.*' HP-Caliper-PMUD 'HPOvAcc.*' HPOvAcc 'HPOvEa.*' HPOvEa 'HPOvLcore.*' HPOvLcore 'HPOvPerf.*' HPOvPerf 'IETHER-DRV.*' IETHER-DRV 'IEXGBE-DRV.*' IEXGBE-DRV 'IGELAN-DRV.*' IGELAN-DRV 'IOCXGBE-DRV.*' IOCXGBE-DRV 'IPF-HP.*' IPF-HP 'Ignite-UX.*' Ignite-UX 'IntegratedLogin.*' IntegratedLogin 'Iso-Image-Enh.*' Iso-Image-Enh 'KBD-MUX.*' KBD-MUX 'KERNEL-PROVIDERS.*' KERNEL-PROVIDERS 'KWDB.*' KWDB 'KernelConfig.*' KernelConfig 'LVM.*' LVM 'LVM-Core.*' LVM-Core 'LVM-MirrorDisk.*' LVM-MirrorDisk 'MOUSE-MUX.*' MOUSE-MUX 'NParProvider.*' NParProvider 'NPartition.*' NPartition 'NTP.*' NTP 'NetworkConfig.*' NetworkConfig 'ONC-Core.*' ONC-Core 'OO-CDIO.*' OO-CDIO 'OOC-SVCS.*' OOC-SVCS 'OVSNMPAgent.*' OVSNMPAgent 'OnlineJFS01.*' OnlineJFS01 'PFIL-HP.*' PFIL-HP 'PRM-Sw-Gui.*' PRM-Sw-Gui 'PRM-Sw-Krn.*' PRM-Sw-Krn 'PRM-Sw-Lib.*' PRM-Sw-Lib 'Package-CVM-CFS.*' Package-CVM-CFS 'Package-Manager.*' Package-Manager 'PartitionManager.*' PartitionManager 'PeriphDevWeb.*' PeriphDevWeb 'PrinterConfig.*' PrinterConfig 'Proc-Resrc-Mgr.*' Proc-Resrc-Mgr 'PropPlus.*' PropPlus 'ProviderSvcsCore.*' ProviderSvcsCore 'RAIDSA.*' RAIDSA 'RAIDSA-PROVIDER.*' RAIDSA-PROVIDER 'RAMD.*' RAMD 'SAS-COMMON.*' SAS-COMMON 'SAS-PROVIDER.*' SAS-PROVIDER 'SAS-SASD.*' SAS-SASD 'SATA-DVD.*' SATA-DVD 'SCSI-Provider.*' SCSI-Provider 'SFM-CORE.*' SFM-CORE 'SG-Apache-Tool.*' SG-Apache-Tool 'SG-DB2-Tool.*' SG-DB2-Tool 'SG-Mysql-Tool.*' SG-Mysql-Tool 'SG-NFS-Tool.*' SG-NFS-Tool 'SG-Oracle-Tool.*' SG-Oracle-Tool 'SG-Samba-Tool.*' SG-Samba-Tool 'SG-Sybase-Tool.*' SG-Sybase-Tool 'SG-Tomcat-Tool.*' SG-Tomcat-Tool 'SGManagerPI.*' SGManagerPI 'SGWBEMProviders.*' SGWBEMProviders 'SRP.*' SRP 'SYSPREP.*' SYSPREP 'SecurityConfig.*' SecurityConfig 'ServiceGuard.*' ServiceGuard 'Sup-Tool-Mgr.*' Sup-Tool-Mgr 'SysMgmtBase.*' SysMgmtBase 'SysMgmtHomepage.*' SysMgmtHomepage 'SystemComm.*' SystemComm 'USB-CORE.*' USB-CORE 'USB-EHCI.*' USB-EHCI 'USB-OHCI.*' USB-OHCI 'USB-TRANS.*' USB-TRANS 'UUCP.*' UUCP 'Update-UX.*' Update-UX 'UsersAndGroups.*' UsersAndGroups 'VParProvider.*' VParProvider 'WBEMP-FCP.*' WBEMP-FCP 'WBEMP-FS.*' WBEMP-FS 'WBEMP-IOTreeIP.*' WBEMP-IOTreeIP 'WBEMP-LAN.*' WBEMP-LAN 'WBEMP-Storage.*' WBEMP-Storage 'WBEMServices.*' WBEMServices 'bash.*' bash 'gWLM-Agent.*' gWLM-Agent 'gettext.*' gettext 'iCAP-Mgr.*' iCAP-Mgr 'iCOD.*' iCOD 'less.*' less 'libiconv.*' libiconv 'lsof.*' lsof 'olosProvider.*' olosProvider 'screen.*' screen 'scsiU320.*' scsiU320 'termcap.*' termcap 'tusc.*' tusc 'utilProvider.*' utilProvider " failed.  Output is:
WARNING: An attempt to get the network host entry for "rx2660" failed.
         This may result in denial of access to users and agents at
         this host.  Check the spelling of this name, then your
         "/etc/hosts" file, or your "/etc/resolv.conf" file and DNS
         resolver configuration.  The nslookup program may be helpful
         in isolating this problem.
ERROR:   Cannot set the security context for this session.  Cannot
         determine the user's identification.  Please give this
         information to your Hewlett-Packard support person.

#

It seems that the cpio was succesful, but there is some name resolution problem. I only have some rough ideas that the swmodify process is intended to remove some unnecessary packages/dependencies from the containment which aren't needed in an SRP zone. Maybe the problem is that previously the HPVM product was installed here as it's our test environment.

The hosts and resolv.conf file seems to be ok within the containment:

# cat /var/hpsrp/hp-prelak/etc/hosts
# @(#)B.11.31_LRhosts $Revision: 1.9.214.1 $ $Date: 96/10/08 13:20:01 $
#
# The form for each entry is:
# <internet address>    <official hostname> <aliases>
#
# For example:
# 192.1.2.34    hpfcrm  loghost
#
# See the hosts(4) manual page for more information.
# Note: The entries cannot be preceded by a space.
#       The format described in this file is the correct format.
#       The original Berkeley manual page contains an error in
#       the format description.
#

127.0.0.1       localhost       loopback
192.168.1.6 rx2660.invigor rx2660 # @srp
# cat /var/hpsrp/hp-prelak/etc/resolv.conf
domain invigor
nameserver 192.168.1.1
#

How could I solve this problem and get trough the install phase?

Regards,

Viktor

[Viktor Balogh]

Update: I noticed that there's no nsswitch.conf file in the newly created SRP, I don't know if this could cause the problem. but how to proceed?

# srp -start hp-prelak
<14>Oct 18 15:06:13 srp: Executing SRP start operation for compartment (hp-prelak)
<11>Oct 18 15:06:14 srp: start hp-prelak lan interfaces
<11>Oct 18 15:06:16 srp: The following processes in compartment "hp-prelak" will be terminated:
<11>Oct 18 15:06:16 srp: UID COMD
<11>Oct 18 15:06:20 srp: stop hp-prelak lan interfaces
Error: Cannot start srp hp-prelak due to prestart errors
The required SRP provisioning did not complete.
Run "srp -r hp-prelak -s init,network" to complete provisioning.
<11>Oct 18 15:06:20 srp: Error: Cannot start srp hp-prelak due to prestart errors
The required SRP provisioning did not complete.
Run "srp -r hp-prelak -s init,network" to complete provisioning.
#

with an "srp -r" command the whole environment would be built from scratch trough cpio.... ?!?!???

[Viktor Balogh]

from /var/hpsrp/hp-prelak/var/adm/sw/swagentd.log:



======= 10/17/11 14:48:35 MESZ BEGIN swagentd (pid = 3126).

* Registered RPC protocol "ncacn_ip_tcp" with endpoint "2121".
* Registered RPC protocol "ncadg_ip_udp" with endpoint "2121".
* Checking job queue at 1 minute intervals.
ERROR: Could not obtain the caller's authentication information from
the RPC call received from host 127.0.0.1. This is an
internal SD error if SD "internal" authentication is in use,
or a DCE configuration error if "dce_secret" authentication is
in use.
ERROR: Access denied to list socs on host. No user authenticated.
10/17/11 15:39:40 MESZ
ERROR: Could not obtain the caller's authentication information from
the RPC call received from host 127.0.0.1. This is an
internal SD error if SD "internal" authentication is in use,
or a DCE configuration error if "dce_secret" authentication is
in use.
ERROR: Access denied to list socs on host. No user authenticated.
10/17/11 16:27:03 MESZ
ERROR: Could not obtain the caller's authentication information from
the RPC call received from host 127.0.0.1. This is an
internal SD error if SD "internal" authentication is in use,
or a DCE configuration error if "dce_secret" authentication is
in use.
ERROR: Access denied to list socs on host. No user authenticated.
10/17/11 20:01:08 MESZ