Service Guard.

[Nobody's Hero]

Anyone run itno this problem?

We run service guard, which needs 'rexec' to be running for the cluster to communicate with each other. However, 'rexec' is against government security polocies.

How can you use service guard without rexec?

[Peter Godron]

Robert,
I thought, once configured rexec was no longer required for Service Guard.
Have you got your tcp/ucp ports set up in /etc/services. Grep for hacl in the file.

Also read:
http://forums1.itrc.hp.com/service/forums/bizsupport/questionanswer.do?threadId=11456 to avoid .rhosts.

[Steven E. Protter]

Shalom,

Yes, I use 11.16 without these commands. They are totally disabled in my environment.

11.16 has an alternate means of authorizeing SG commands between nodes. It uses a node list called cmnodelist

This may be a problem on earlier versions and ssh public keys need to be exchanged.

The details of the configuration is in a lab I will not have access to for an hour.

SEP

[Steven E. Protter · Accepted solution]

Post splitting unintentional.

Google was hung

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=138299

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=856078

HP doc:
http://docs.hp.com/en/B9903-90048/ch01s05.html

http://docs.hp.com/en/B9903-90042/B9903-90042.pdf

I am very happy to hear the r-protocols violate government security guidelines.

SEP

[Nobody's Hero]

Steven, I would really like to see the settings. Could you post them when you have access to the lab machine?

Bob