Unable to create the cluster

[Vikas Dokhe]

when giving the command ....
cmquerycl -C cluster.ascii -n node1 -n node2
giving the error,,,
"Error: Permission denied to 127.0.0.1
Error: Permission denied to 10.0.28.151
Warning: Unable to determine local domain name for Agrani
Error: Node node2 is refusing Serviceguard communication.
Please make sure that the proper security access is configured on node
Agrani through either file-based access (pre-A.11.16 version) or role-based
access (version A.11.16 or higher) and/or that the host name lookup
on node Agrani resolves the IP address correctly.
Failed to gather configuration information."



having the right enrty in /etc/host file and /.rhost file.
resolving the ip through nslookup and able to ping the node1 and ip.
also able to ping the heartbeat ip.

same error is giving when giving the command like ..
cmcheckconf and cmruncl

[RAC_1]

Did you set .rhosts file for root? Set it and try again. Also make sure that nslookup works on ip address and on host names.

[IT_2007]

first confirm that you able to do rsh from one node to another and check /etc/hosts entries for 127.0.0.1 on both nodes.

[nanan]

Hi Vikas
Make sure hosts file and .rhosts,
and have you tested linkloop each the same broadcast domain Lan cards.

If you passed those things,
the cause of the problem may be in inetd.conf.

So could you post the inetd.conf file of two nodes

Regards
nanan

[Vikas Dokhe]

I have checked hosts and .rhost files..its ok..and nslookup is resolving the ip and hostname...

i m sending inetd.conf file for both the node....

[nanan]

Did you test linkloop?
Could you post the output of
this command at all of the system

#swlist -l product |grep PH |grep -i serviceguard

i will wait fo that

[Vikas Dokhe]

This is the output...for these command/...with i m getting output...but serviceguard is there ...with#swlist -l command



#swlist -l product|grep PH|grep -i serviceguard
root@node1:/etc>swlist -l product|grep PH|grep -i ServiceGuard
root@node1:/etc>swlist -l product|grep -i ServiceGuard
ATS-CORE A.11.16.00 Serviceguard Advanced Tape Services
SG-NMAPI A.11.16.00 SG-NMAPI Serviceguard Extension for RAC SD product
ServiceGuard A.11.16.00 ServiceGuard
You have mail in /var/mail/root

[melvyn burnard]

With A.11.16 of Serviceguard, there are some VERY stringent security checks, and to get through these you need to have configured the cmclnodelist file with ALL of the various ip addresses of the hosts an dtheir names.
I would recommend you read the security manuals for Serviceguard at:
http://docs.hp.com/en/ha

[nanan]

Vikas!
Let's check the rhosts and hosts file again.
there isn't any worong in your prevous info.


Have you ever try to rlogin each other.
If ok
check permission of .rhosts. it should not grant a writable for goup and other.

I would like see these output
1. more .rhosts
2. more /etc/hosts
3. cmquerycl -v -C
4. ls -l .rhosts
5. netstat -in

Regards
nanan

[Prashanth.D.S]

Hi Vikas,

MCSG A.11.16 has a new security function that name is AccessControl Policies. By this function, we cannot get information by cmquerycl(1m) on a node which affents uster running on another node when its node is not part of the same cluster

Use the following procedure to add a node with HP-UX commands. For
this example, nodes ftsys8 and ftsys9 are already configured in a
running cluster named cluster1, and you are adding node ftsys10.
...
2. Specify a new set of nodes to be configured and generate a template of the new configuration. Specify the node name(31 bytes or less)without its full comain name; for example, specify ftsys8 and node ftsys8.cup.hp.con:

# cmquerycl -C clconfig.ascii -c cluster1
-n ftsys8 -n ftsys9 -n ftsys10
-----------------------------------------------------------------------
By this situation, we should execute cmquerycl(1m) at ftsys8 or ftsys9.

Best Regards,
Prashanth

[Steven E. Protter]

Shalom,

I have found that when using the new cmnodelist security that sometimes merely running cmquerycl etc on the second node instead of the first provided better results.

SEP