Serviceguard Configuration error on HP-UX 11.31

[UVA]

Hi,

I m creating the MC Serviceguard cluster on my HP-UX 11.31 systems.

i configure all the basic things like cmnodelist,.rhost, hosts.equiv,qurom disk etc...

everything was going fine, the cmcheckconf was successed, but now the problem is while applying the cmapplyconf command the system says some permission denied error messages,
im here attaching those output and the syslog file output. pls some one help is any patches required..

I m using the MC serviceguard version A.11.17.01

error messages
==============
cmcheckconf -v -C cmclconfig.ascii
Checking cluster file: cmclconfig.ascii
Checking nodes ... Done
Checking existing configuration ... Done
Gathering storage information
Found 9 devices on node nakeprd1
Found 9 devices on node nakeprd2
Analysis of 18 devices should take approximately 2 seconds
0%----10%----20%----30%----40%----50%----60%----70%----80%----90%----100%
Found 2 volume groups on node nakeprd1
Found 2 volume groups on node nakeprd2
Analysis of 4 volume groups should take approximately 1 seconds
0%----10%----20%----30%----40%----50%----60%----70%----80%----90%----100%
Gathering network information
Beginning network probing (this may take a while)
Completed network probing
Checking for inconsistencies
Adding node nakeprd1 to cluster nakeprd
Adding node nakeprd2 to cluster nakeprd
cmcheckconf: Verification completed with no errors found.
Use the cmapplyconf command to apply the configuration.
# cmapplyconf -f -v -C cmclconfig.ascii
Checking cluster file: cmclconfig.ascii
Checking nodes ... Done
Checking existing configuration ... Done
Gathering storage information
Found 9 devices on node nakeprd1
Found 9 devices on node nakeprd2
Analysis of 18 devices should take approximately 2 seconds
0%----10%----20%----30%----40%----50%----60%----70%----80%----90%----100%
Found 2 volume groups on node nakeprd1
Found 2 volume groups on node nakeprd2
Analysis of 4 volume groups should take approximately 1 seconds
0%----10%----20%----30%----40%----50%----60%----70%----80%----90%----100%
Gathering network information
Beginning network probing (this may take a while)
Completed network probing
Checking for inconsistencies
Adding node nakeprd1 to cluster nakeprd
Adding node nakeprd2 to cluster nakeprd
Marking/unmarking volume groups for use in the cluster
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Permission denied to nakeprd1
Permission denied to nakeprd2
Unable to verify cluster configuration change completion, proceeding anyway..
Cannot connect to configuration daemon (cmclconfd) on node nakeprd1
Cannot connect to configuration daemon (cmclconfd) on node nakeprd2
Completed the cluster creation


# tail -50 /var/adm/syslog/syslog.log
Mar 16 19:32:47 nakeprd1 cmclconfd[12799]: Querying volume group /dev/vglock for node nakeprd1
Mar 16 19:32:47 nakeprd1 cmclconfd[12799]: Volume group /dev/vglock has no cluster attributes
Mar 16 19:32:52 nakeprd1 cmclconfd[12799]: Unable to read /etc/cmcluster/cmclconfig, No such file or directory
Mar 16 19:32:52 nakeprd1 cmclconfd[12799]: Initializing cluster lock device /dev/dsk/c10t0d1 for node nakeprd1
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Initializing Exclusive VG /dev/vglock for node nakeprd1
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Updated file /etc/cmcluster/cmclconfig.tmp for node nakeprd1 (length = 20000).
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Updated file /etc/cmcluster/cmclconfig.tmp for node nakeprd1 (length = 0).
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Updated file /etc/cmcluster/cmclconfig for node nakeprd1 (length = 7872).
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Unable to read /etc/cmcluster/cmclconfig, No such file or directory
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Added node nakeprd1 to cluster nakeprd. (21280-0-0-0-0-0-0-0-0-0-0-0)
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Added node nakeprd2 to cluster nakeprd. (21280-0-0-0-0-0-0-0-0-0-0-0)
Mar 16 19:32:53 nakeprd1 cmclconfd[12799]: Created the cluster configuration for cluster nakeprd. (21280-0-0-0-0-0-0-0-0-0-0-0)
Mar 16 19:32:53 nakeprd1 cmclconfd[12821]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:53 nakeprd1 cmclconfd[12821]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:32:54 nakeprd1 cmclconfd[12827]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:54 nakeprd1 cmclconfd[12827]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:32:55 nakeprd1 cmclconfd[12830]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:55 nakeprd1 cmclconfd[12830]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:32:56 nakeprd1 cmclconfd[12833]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:56 nakeprd1 cmclconfd[12833]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:32:57 nakeprd1 cmclconfd[12836]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:57 nakeprd1 cmclconfd[12836]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:32:58 nakeprd1 cmclconfd[12839]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:58 nakeprd1 cmclconfd[12839]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:32:59 nakeprd1 cmclconfd[12842]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:32:59 nakeprd1 cmclconfd[12842]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:33:00 nakeprd1 cmclconfd[12848]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:33:00 nakeprd1 cmclconfd[12848]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:33:01 nakeprd1 cmclconfd[12851]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:33:01 nakeprd1 cmclconfd[12851]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:33:02 nakeprd1 cmclconfd[12854]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:33:02 nakeprd1 cmclconfd[12854]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:33:03 nakeprd1 cmclconfd[12857]: Permission denied for user root on node 172.20.101.50 (RBA)
Mar 16 19:33:03 nakeprd1 cmclconfd[12857]: WARNING: User root from ip address 172.20.101.50 does not have privileges to access this node. Either they are coming from a node without enhanced security or somebody may be attempting un-authorized access to this system.
Mar 16 19:33:04 nakeprd1 CM-CMD[12712]: Configuration change is not delivered through /usr/sbin/cmconfig_change_callout
Mar 16 19:48:50 nakeprd1 CM-CMD[13556]: cmapplyconf -v -C -s cmclconfig.ascii
Mar 16 19:49:40 nakeprd1 CM-CMD[13574]: cmapplyconf -v -C cmclconfig.ascii

[Siju Vadakkan · Accepted solution]

check the following details

1. /etc/cmcluster/cmclnodelist

hostname/ipaddress root

**put an entry for all the hosts on each node.

2.more /etc/inetd.conf |grep auth
auth stream tcp6 wait root /usr/lbin/identd identd

3.more /etc/hosts | grep "loopback"
127.0.0.1 localhost loopback

[UVA]

Hi,

# more /etc/cmcluster/cmclnodelist
nakeprd1 root
nakeprd2 root
nakeprd1-hb root
nakeprd2-hb root

more /etc/hosts

172.20.100.5 qgtcin01.qgtc.com.qa qgtcin01
172.20.101.50 nakeprd1
10.10.10.1 nakeprd1-hb
10.10.10.2 nakeprd2-hb
172.20.101.51 nakeprd2
127.0.0.1 localhost loopback

more /etc/inetd.conf | grep auth
auth stream tcp6 wait bin /usr/lbin/identd identd

in the inetd.conf file showing the bin user instead of root...and the /etc/hosts, and cmclnodelist files are ok and matching on both nodes

any help highly Appreciated

Thanks

[Siju Vadakkan]

1. In the inetd.conf u have replace bin with root. that could be the reason it is failing.

2. And in the /etc/cmcluster/cmclnodelists, u don't need to mention Heart beat IP. Just specify ur clsuter node IP with user root

[UVA]

Hi,

http://forums12.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1205730286309+28353475&threadId=943149

as per the above thread they are telling to install the patch for changing the auth bin to root. the patch name PHCO_32794

But the only difference is my Serviceguard version is A.11.17.01

my inetd.conf output
more /etc/inetd.conf | grep auth
auth stream tcp6 wait bin /usr/lbin/identd identd

[Siju Vadakkan]

If that is the case, u can install the latest patch

PHCO_37069

and still u need to update inetd.conf

[UVA]

Hi,

I did the changes and the patche (PHCO_37069)said is for 11.23 my OS is 11.31...

after the cahnges

# more /etc/inetd.conf | grep auth
auth stream tcp6 wait root /usr/lbin/identd identd

cmapplyconf -v -C cmclconfig.ascii
Checking cluster file: cmclconfig.ascii
Checking nodes ... Done
Checking existing configuration ... Done
Node nakeprd1 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
nakeprd1 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node nakeprd1 resolves the IP address correctly.
cmapplyconf: Failed to gather configuration information

[Siju Vadakkan]

1. Have you executed "inetd -c" after updating inetd.conf.
2. do nslookup nakeprd1
nslookup nakeprd2
nslookup 172.20.101.50
nslookup 172.20.101.51



and check /var/adm/inetd.conf

if it fails even after the above steps
---------------------------------------
finally what u can do us in the /etc/cmcluster/cmclnodelist, remove all entries and just put "+" symbol and try

[UVA]

inetd -c
# nslookup nakeprd2
Name Server: qgtcin01.qgtc.com.qa
Address: 172.20.100.5

Trying DNS
Trying NIS
looking up FILES
Name: nakeprd2
Address: 172.20.101.51

# nslookup 172.20.101.50
Name Server: qgtcin01.qgtc.com.qa
Address: 172.20.100.5

Trying DNS
Trying NIS
looking up FILES
Name: nakeprd1
Address: 172.20.101.50

# nslookup 172.20.101.51
Name Server: qgtcin01.qgtc.com.qa
Address: 172.20.100.5

Trying DNS
Trying NIS
looking up FILES
Name: nakeprd2
Address: 172.20.101.51

[UVA]

Hi,

I did all of the above...the problem is still existing.

any more clues highly appreciated

Thanks

[Siju Vadakkan]

provide the following details:
# grep hacl-cfg /etc/services


# grep hacl-cfg /etc/inetd.conf

# netstat -a | grep hacl

[UVA]

Hi Siju,

grep hacl-cfg /etc/services
hacl-cfg 5302/tcp # HA Cluster TCP configuration
hacl-cfg 5302/udp # HA Cluster UDP configuration
# grep hacl-cfg /etc/inetd.conf
hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd -c -i
# netstat -a | grep hacl
tcp 0 0 localhost.51361 localhost.hacl-cfg ESTABLISHED
tcp 0 0 *.hacl-probe *.* LISTEN
tcp 0 0 *.hacl-cfg *.* LISTEN
tcp 0 0 localhost.hacl-cfg localhost.51361 ESTABLISHED
udp 0 0 *.hacl-cfg

Thanks for spending your valuable time

[Siju Vadakkan]

please check whether the below patch is installed or not

PHSS_32660

[UVA]

Hi,

The patch is not installed..

#swlist -l patch | grep -i PHSS_3266

can i install the same on my both nodes

[Siju Vadakkan]

I don't think it is because of the patch,

Can u remove RAB , if it is installed.

#whereis bastille
#basille -r

[UVA]

Hi Siju

My cluster came up,

i used the ip address insted of name in my cmclnodelist, .rhosts,hosts.equiv files and its working fine

i think i needs to enter this hostname's and ip address's in my DNS server.

Anyway Thanks Siju for your immidiate Responce...


thankslot

[Siju Vadakkan]

Great..Congrates..btb where r u from and from which company.

[UVA]

Hi,


frm Mannai, Doha, Qatar.

[Siju Vadakkan]

It was great pleasure alking to u.
If u need any help, siju_vadakkan@yahoo.com

[UVA]

thanks hp