.rhosts still needed after Continental Cluster configuration

[Matthew McGee]

.rhosts is still needed to authenticate servers from different local clusters within the Continental Cluster. When looking through CC documentation, I noticed .rhosts was needed to do initial push of binaries and not needed for operations. Why is this occurring? When running cmviewconcl the following message appears.

Messages states:
Not Authenticated: "server_with_no_.rhosts" Server Security Violation

If a .rhosts is placed on the server reporting the violation, message goes away.

[Court Campbell]

Actually I believe in lieu of .rhosts the preferred method is to use the /etc/cmcluster/cmclnodelist file instead.

http://docs.hp.com/en/B5158-90024/ch05s01.html

[Matthew McGee]

The cmclnodelist is setup on all nodes in both local clusters. Each cmclnodelist has all nodes belonging to both cluster listed with root privelidges.

[Matthew McGee]

I'm sorry. I also should have mentioned I have the cmomhosts files set up, DNS is working properly at both sites, all local cluster management works properly at both sites.

[Court Campbell]

Have you verified that the node that is having the issue is in fact in the cmomhosts on all the nodes including its self?

[melvyn burnard]

The requirement for .rhosts, or cmclnodelist, in Continental Clusters is only when using cmcheckconcl or cmapplyconcl, i.e. when write access is required

For normal purposes, the cmomhosts file is used as this allows for read access.
Make sure you have used the correct format for the cmomhosts (similar to inetd.sec and NOT .rhosts)

To me the error indicates that you have a configuration issue that reflects a name/ip resolution problem

[Matthew McGee]

Thank you for your feedback. The cmomhosts file is set up according to the CC documentation. It works properly. When you install CC it actually affects the local cluster communication until a valid cmomhosts is created. Name/IP resolution problems do not exist. DNS is working properly at both sites. All servers including themselves appear in the cmclnodelist files on all servers. A master file was generated and copied to all nodes in both clusters. I also tried putting fully qualified domain names in the cmclnodelist file. Results are the same. Could it be in inetd.conf or some other configuration file that doesn't allow communication without .rhosts?