SG giving error while configuration

[shikrish]

Giving node refusing error, version 11.17 with HPUX 11.31,

Done #bastille -r as seen from one of the sites and now the hacl deamons are not appearing with the inetd.conf file

[Stephen Doud]

Port requirements for Serviceguard are listed in the Release Notes:
http://bizsupport1.austin.hp.com/bc/docs/support/SupportManual/c02029968/c02029968.pdf

Bastille can restrict operation of network services.
See /etc/opt/sec_mgmt/bastille/configs/defaults/HOST.config

Serviceguard uses 'ident', 'hacl' and optionally 'registrar'.

See /etc/opt/sec_mgmt/bastille/config and verify that
SecureInetd.deactivate_ident="N"

[shikrish]

Thanks for that thread Stephen, the error seems to be as follows,

cmquerycl -v -C /etc/cmcluster/newcm.ascii -n EDCDCS1 -n EDCDCS2
Permission denied to 172.16.50.194
Permission denied to 127.0.0.1
Warning: Unable to determine local domain name for EDCDCS1
Looking for other clusters ... Done
Node EDCDCS1 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
EDCDCS1 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node EDCDCS1 resolves the IP address correctly.

[likid0]

if you look in google or forum search for:

Node is refusing Serviceguard communication

you will get loads of threads with similar cases that might help.

Sometimes, it can also be, bad name resolution, check /etc/hosts in both servers have node ip/names ok.

And also check your /etc/cmcluster/cmnodelist your hostnames are ok

[shikrish]

Checked the connections and rlogin between servers which works fine,
Infact while trying to query the servers works fine as of now after the host entries were made primay but incase of trying to cmcheckconf with the query result of four servers following error pops up.
Checking cluster file: /etc/cmcluster/newcon.ascii
Note : a NODE_TIMEOUT value of 2000000 was found in line 149. This value
is recommended if the top priority is to reform the cluster as fast
as possible in case of failure. If the top priority is to minimize
reformations, consider using a higher setting. For more information see
the cluster configuration ASCII file or the Managing Serviceguard manual.
Checking nodes ... Done
Checking existing configuration ... Done
Node EDCDCS1 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
EDCDCS1 through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node EDCDCS1 resolves the IP address correctly.
cmcheckconf: Failed to gather configuration information

[Viktor Balogh]

post the following:

# cat /etc/cmcluster/cmclnodelist
# grep -e hacl -e registrar -e ident /etc/inetd.conf

I think that bastille disabled some services which are essential for serviceguard to work..