rhosts vs. cmnodelist

[Holger Knoppik]

Hi all,

maybe a dumb question, but i want to known the following: To communicate with other nodes in the cluster, each node needs either a .rhosts file or a cmnodelist. In times of SSH .rhosts is insecure, obsolete etc. ...
Can i copy .rhosts to cmnodelist (i'd like to replace the rtools on my servers) ? Do i have to bring the cluster down for that? ...
Any threads for this at the forums (i found nothing appropriate)?
TIA
RGDS, Holger

[Robert Gamble]

I would not dump the contents of .rhosts into cmnodelist, as it is only for validating inter-node access within the cluster.

If the /etc/cmcluster/cmclnodelist file exists, MC/ServiceGuard will only use this file to verify access within the cluster; otherwise, the /.rhosts file will be used.

For more information about cmnodelist, see:
http://docs.hp.com/cgi-bin/onlinedocs.py?mpn=B3936-90065&service=hpux&path=../B3936-90065/00/00/33&title=Managing%20MC/ServiceGuard

[Robert Gamble]

I do not know if you need halt the cluster to switch between using .rhosts and cmnodelist, but I do know from experience, that you can modify the cmnodelist once the cluster is using it.

Good Luck!

[melvyn burnard · Accepted solution]

If your .rhosts has the correct information in it, i.e. the right hostnames and root access, then yes copy .rhosts across.
SG will simply see cmclnodelist is available and start using it, assuming you are running a version of Sg that supports this. It only came out for Sg version 10.10 and above

[Holger Knoppik]

OK guys,

thanks for the quick assistance. I could start and watch the cluster comin up after moving .rhosts to cmclnodelist. Going to have a beer now and then sleep 21600 ;-)

RGDS, Holger