Service Guard Audit - a helping hand

[steven Burgess_2]

Hi Everyone

We recently had HP on site for an MCSG audit.

Following this (and for audit requirements) we have decided to develop an audit/configuration script that looks at standard configuration and pre defined settings etc etc .

We already run a number of checks in our environment against the likes of cron, users and groups, sdux packages etc, but need to expand greatly on this. I'm building the list of things I am going to be checking in the script, these refer to for eg

node config
resources (cpu, mem, lan)
vg config
software
packages
root mirror

If anyone would be kind enough to have a read through the attachments I'm going to post in this thread and offer more options as per what I need to be looking at I would be grateful. Once we have exhausted everything a definitive list we be built for reference

As well as performing a specific function for our organisation I am using this small project as a means of development for myself under a number of umbrellas,

1. To increase my scripting skills
2. To increase my knowledge of service guard
3. To build a development cluster for the purpose of this test
4. To create a standard build document
5. prepare for cse exam

I understand that most of this has probably been done before and that there are a large number of utilities (cmscan, cmgetconf, cmquerycl) that will help me get most of my answers. I am going to be using these where possible as I certainly do not want to re-invent the wheel

All help appreciated

attachments to follow

Steve

[steven Burgess_2]

node list

[steven Burgess_2]

resource list

[steven Burgess_2]

vg list

[steven Burgess_2]

package list

[steven Burgess_2]

package list

[steven Burgess_2]

user, group and cron

[steven Burgess_2]

lan list

[steven Burgess_2]

root mirror

[steven Burgess_2]

attachments will open with notepad

ta

Steve

[Duncan Edmonstone · Accepted solution]

Steve,

I'm not sure I quite understand what you are trying to achieve:

1. Compare config info on nodes in a cluster against each other to ensure consistency.

-or-

2. Compare all serviceguard nodes in your environment against a 'best practice' set of rules

or both?

Did HP talk to you about or use the cluster consistency monitor?

http://h71028.www7.hp.com/enterprise/downloads/ccmon-service-brief.pdf

This already does a number of the items you are looking for...

HTH

Duncan

[steven Burgess_2]

Hi Duncan

Thanks for the response, essentially we are looking to achieve both, compare configs and a set of rule for best practice.

We have been looking at the consistency monitor also

Regards

Steve

[steven Burgess_2]

Boing

[Stephen Doud]

At little off topic, but may nail what you really want more closely...
HP Consulting can provide a Cluster Consistency Service which leaves a utility called "ccmon" onsite which can be programmed to report periodically with a comparison of the files of each server in the cluster - for the purpose of showing whether changes have occured which may break the availability of a cluster.

http://h71028.www7.hp.com/enterprise/cache/10973-0-0-225-121.aspx

[Geoff Wild]

As Stephen mentioned, CCMON is the way to go. Cost is reasonable 1 or 2 technical services days.

Rgds...Geoff

[shibu_3]

Have you developed a script yet ?