Security prolem in SG 11.15

[Alessio_3]

Hi All,

I'm trying to setup a 2-nodes cluster using HPUX 11i and SG 11.15.
I setup security through cmclnodelist and .rhosts too. I can query the cluster from node A (extserv) to the node B (extb), while from B to A I seem to have some security problems.

This is the what appears in A's syslog.log:

Jul 18 10:04:50 extserv cmclconfd[22458]: WARNING: Unknown user from node extb (ip address 10.249.20.19) does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.

Any ideas?

Regards,
Alessio

[melvyn burnard · Accepted solution]

what pacth versions are on these servers?
use the what command:
what /usr/lbin/cmcld

Yiou appear to have different versions as this message indicates one of the servers has the security patch for sg 11.15, an dthe other does not.
Otherwise you may have diofferences ion your inedt.conf

[John Bigg]

I suggest that you read the following document which will tell you exactly how to configure the security and other related files:

http://docs.hp.com/en/6283/SGsecurityfiles.pdf

The problem could be that you have not got all IP addresses from your cluster nodes listed in your hosts file resolving to the hostname or having the hostname as an alias.

You need to check for example that 10.249.20.19 resolves to or has the hostname of the system it is coming from as an alias.

The fact that the messages start user unknown indicates that maybe you have not got the same security fixes on all nodes. What is the patch level on the node with 10.249.20.19 compared to the patch level with node extserv (assuming they are not on the same swystem)?

[Alessio_3]

Closed by author