Serviceguard Manager Version A.05.
© Copyright 2009 Hewlett-Packard Company Legal Notices Confidential computer software. Valid license from HP required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents About This Document.........................................................................................................9 Publishing History..................................................................................................................................9 Typographic Conventions......................................................................................................................9 1 Serviceguard Manager Version A.05.02 Release Notes......................
JAGag00662 when adding two services in guided mode index number does not increment..............................................................................................................................38 JAGaf93917 Customer requests a native x86-64 version for Serviceguard Manager to be created...................................................................................................................................38 JAGaf92790: JRE security vulnerability in JRE 1.4.2_09 and earlier..........
JAGaf96075 - Illegal arg except when deleting a subnet with multiple NIC's.....................47 JAGag07974 - Problems after converting ctl script to ASCII style........................................47 JAGag08885 - HP-UX/Linux: typed target folder is ignored during save session...............47 Software Availability in Native Languages.....................................................................................
List of Figures 1-1 1-2 1-3 6 Serviceguard Manager: Tree and Map..........................................................................................13 Serviceguard Manager Admin menu............................................................................................14 Configuring Clusters with Serviceguard Manager (Nodes tab)...................................................
List of Tables 1-1 1-2 1-3 Accessing Serviceguard Manager.................................................................................................12 Capabilities of Session Servers on Target Clusters........................................................................20 Getting the Serviceguard Manager A.05.02 Software...................................................................
About This Document Publishing History Manufacturing Part Number Supported Operating Systems B8325–90056 HP-UX 11.00 and greater, A.05.00 Linux, Windows 2000, 2003 October 2005 B8325–90061 HP-UX 11.00 and greater, A.05.01 Linux, Windows 2000 Service Pack 1 or later., 2003 February 2007 B8325–90066 HP-UX 11.00 and greater, Linux, Windows 2000 Professional with Service Pack 1 or later, Microsoft Windows XP Professional Edition, Windows Server 2003, or Windows Vista.
user input Commands and other text that you type. computer output Text displayed by the computer. Enter The name of a keyboard key. Note that Return and Enter both refer to the same key. A sequence such as Ctrl+A indicates that you must hold down the key labeled Ctrl while pressing the A key. term Defined use of an important word or phrase. variable The name of an environment variable, for example PATH or errno.
1 Serviceguard Manager Version A.05.02 Release Notes Announcements Serviceguard Manager is the graphical user interface for the Serviceguard product. With it, you can monitor, administer, and configure clusters managed by Serviceguard, Serviceguard Extension for RAC, Metrocluster, Continentalclusters, and Serviceguard Extension for Faster Failover. NOTE: HP Serviceguard Manager has a web-based, (SIM) Systems Insight Management/System Management Homepage (SMH) application, version B.xx.
What's in Serviceguard Manager Version A.05.02 Two new features for version A.05.02 are: • • Serviceguard Manager Version A.05.02 now supports Windows Server 2008 Serviceguard Manager Version A.05.02 supports SIM 5.2 or later Depending on the number of clusters you want to manage at one time, as well as the version of the Serviceguard cluster node members, the appropriate version of Serviceguard Manager appears. Refer to table 1-1 for more information.
What You See The figure below shows an instance of Serviceguard Manager with two sessions. (Up to 10 sessions are supported.) The icon by the connection to both Session Servers show that the user's login is root. The Alerts button tells you there is information about serious alerts. We can see a red-bordered cluster is down. Also critical are the clusters that have a package icon with a red X, showing they have a package that is down.
You can issue common administrative commands on your clusters through Serviceguard Manager. (See below.) With Serviceguard A.11.16.xx and A.11.17.xx clusters, the administrator role is specified by configuring a non-root Admin Access Control Policy. Figure 1-2 Serviceguard Manager Admin menu Starting with Serviceguard Manager A.04.00 on HP-UX, you can configure clusters and failover packages on nodes with Serviceguard A.11.16.xx. Version A.05.0x, extends this to nodes with Serviceguard A.11.17.xx.
Figure 1-3 Configuring Clusters with Serviceguard Manager (Nodes tab) What You See 15
How it Works You can install Serviceguard Manager on a system running HP-UX, Linux, or Windows. From the system running Serviceguard Manager, you connect to a Serviceguard Node (HP-UX or Linux) to establish your management session. When you establish a Session Server connection, which is a cluster member node that the administrator connects to through Serviceguard Manager and displays the discovered clusters.
For information about Red Hat Linux, go to http://www.redhat.com For information about SUSE Linux, go to http://www.suse.com For information about HP OpenView Operations, IT/Operations, and Network Node Manager, refer to: http://www.docs.hp.com/hpux/netsys Further Information Additional information about Serviceguard and high-availability topics may be found on HP's web pages: http://www.docs.hp.com/hpux/ha (High Availability) and http://www.docs.hp.com/linux (Linux-specific).
Compatibility Information and Installation Requirements Before you begin an installation, read this entire document and any other Release Notes or READMEs you have. Compatibility This section summarizes the compatibility of this version of Serviceguard Manager with related products and their versions. For all versions (this and older), see the Serviceguard Manager Support Matrix posted on http://www.docs.hp.com/hpux/ha -> serviceguard -> white papers. Serviceguard Manager A.05.
Memory Requirements Running on HP-UX, these are the minimum requirements for Serviceguard Manager: • • • • • 256 MB of available memory 190 MB of available hard disk space under /opt 1 MB of available hard disk space under /usr 1 MB of available hard disk space under /etc/opt/OV if OpenView is installed. 315 MB of available hard disk space under /var for log files.
Requirements for Capabilities Starting with Serviceguard Manager version A.04.00, you can configure clusters and failover packages using nodes that have Serviceguard version A.11.16.xx. With Serviceguard Manager A.05.02, you can also configure clusters and packages on nodes with Serviceguard A.11.17.00 and A.11.17.01. Administration has changed from previous versions as well. Serviceguard version A.11.16.xx, A.11.17.00, and A.11.17.
Table 1-2 Capabilities of Session Servers on Target Clusters (continued) Session Server's Target cluster's Service- guard Service- guard version version To Monitor To Administer To Configure A.11.13.xx, A.11.16.xx, A.11.14.xx, and A.11.17.xx A.11.15.xx User can be any entry in Session Server's /etc/ passwd file Not supported Configuration menu available when an A.11.16.xx or A.11.17.xx object is selected User must supply root password for a cluster node User must log in to Session Server as root.
Each Serviceguard Manager node must allow these connections: • from the cluster nodes: — udp on port 162 • to the cluster nodes: — udp on port 161 Each Serviceguard node must allow these connections: • from the Serviceguard Manager node: — udp on port 161 • to the Serviceguard Manager node: — udp on port 162 • to the COM node: — tcp on port 5303 - and allow only packets with SYN flag.
• • • If you have an earlier version, uninstall it first before installing the new version. If you are on HP-UX and updating from A.03.00.01 or later, a prompt will offer to remove the earlier version for you, and then replace it with the new. If you update from a version of Serviceguard Manager earlier than A.03.00, your user preference files will be replaced with newer default settings. Preference files changed in A.03.00.01, and earlier settings cannot be carried over.
Before Installing Serviceguard Manager • • When deciding where to install Serviceguard Manager, plan for the security you want, and the access you will need. See the table Table 1-2 “Capabilities of Session Servers on Target Clusters” for more information. Consider the connections from users to the Session Server node, the connection from the Session Server to cluster nodes. Installing Serviceguard Manager on HP-UX You can install version A.05.
IMPORTANT: The Java Runtime Environment version that Serviceguard Manager installs may need to be updated. See HPSBMA02445 SSRT090058 – HP-UX Running HP Serviceguard Manager, Remote Execution of Arbitrary Code and Other Vulnerabilities available at http://www.itrc.hp.com for more information. HP recommends that you install JRE 1.5.0.16 (or later), or JRE 1.6.0.04 (or later) available at: http://www.hp.com/go/java To update the Serviceguard Manager JRE on HP-UX: 1.
Installing Serviceguard Manager on Linux You can install from two places: from the Distributed Components CD or from a browser • To install from the Serviceguard Distributed Components CD: 1. Insert the disk and mount the CD-ROM drive. Choose a name for your directory, for example . 2. From /SGManager/LINUX, enter: — For Red Hat Linux X86 and AMD64/Intel EM64T: rpm -i sgmanager-A.05.02.00-1.product.redhat.i386.rpm — For Red Hat Linux Integrity: rpm -i sgmanager-A.05.02.00-1.product.
changes in Serviceguard Manager Version A.03.00.01 and later. Your old preferences cannot be carried over. Installing Serviceguard Manager on Windows Install Serviceguard Manager on a computer that has Microsoft Windows 2000 Professional with Service Pack 1 or later, Windows XP Professional Edition, Windows 2003 Server or Windows Vista. NOTE: • If you currently have an older version of Serviceguard Manager, uninstall it first: Start -> Programs -> Serviceguard Manager -> Uninstall. 1.
NOTE: • Serviceguard Manager installs its own Java Runtime Environment (JRE) and can run only with the JRE located in the Serviceguard Manager directory. • If you have Network Node Manager installed on this computer, see Installing with OpenView, below. • If you are updating from an earlier version of Serviceguard Manager, your user preference files are replaced with default settings. The new preference files are compatible with architecture changes in Serviceguard Manager Version A.03.00.01 and later.
If you do not have ClusterView, but you do have OVO, tools are added to the Tool Bank, ready for an OpenView administrator to assign them. These tools are listed below. Assign these tools carefully. Some require root access to the Serviceguard nodes, and some can grant it indirectly. • • Serviceguard Mgr launcher: You can launch Serviceguard Manager from OpenView. Serviceguard Manager is independent of OpenView.
Uninstalling Serviceguard Manager Before installing Serviceguard Manager A.05.02, uninstall any previous Serviceguard Manager versions. Uninstalling from HP-UX On HP-UX, uninstall Serviceguard Manager by running this command:swremove B8325BA After uninstalling Serviceguard Manager, you can remove the Serviceguard Manager logs; if you are not going to re-install, you can remove the entire directory (by default, /var/opt/sgmgr/).
1. 2. Remove messaging: Go to the Message Group Bank, and delete Message Group HA. Remove templates and monitors: Open the Message Source Templates window. By default, the following are visible on the top level. Remove them: — Syslog — SG_check_cmsnmpd — EMS SNMP Traps — HA Cluster SNMP Traps 3.
Setting up Serviceguard Manager Security, Logins, and Access Policies In version A.11.16.xx, Serviceguard changed its method of controlling and assigning logins, and roles. Therefore, the way you open Serviceguard Manager sessions and discover Serviceguard objects is quite different in versions A.11.16.xx and later than it is in earlier versions of Serviceguard. Logins and roles, Version A.11.16.xx and A.11.17.xx: Creating or modifying configuration still requires Root access (UID=0) on a cluster's nodes.
Bootstrapping a new A.11.16.xx or A.11.17.xx node If no cluster is configured, you can create a cmclnodelist file to act as a "bootstrap" for non-root access. Then other session server nodes have Monitor permission to access the node. Then you will be able to see it on the map and tree, and read its status and properties. If it is not a part of a cluster now, it will still show up in the Unused Nodes list. To configure it later, you can connect to a Session Server with Serviceguard version A.11.16.xx or A.
If the user is logged in as root to a Session Server node with version A.11.15.xx or earlier, the Session Server node will also display certain common administrative commands in the menu. The Session Server relays these commands to the clusters in the session for the users. If you are updating from an earlier version, think about permissions on your HP-UX nodes with Serviceguard Version A.11.13.xx, A.11.14.xx, and A.11.15.xx.
Launching Serviceguard Manager from Linux To launch Serviceguard Manager in Linux, go to the Serviceguard Manager directory (by default, Red Hat is /usr/local/sgmgr/bin and SUSE is /opt/sgmgr/bin). Enter the sgmgr or ./sgmgr command, plus any options you want. To see the full command, enter man sgmgr.
— — — If you specify the -l option, you may also specify the -p option to give that user's password. The -c parameter specifies the clusters you want the Session Server to discover. (The Session Server can discover only the nodes on its subnets.) These clusters will be displayed on your map, under the Session Server's name. Repeat the -c option for several clusters in this session.
In non-English locales, when installing on HP-UX 11.11, install the TrueType Fonts patch: • HP-UX 11.11 — Japanese: PHSS_26971 — Korean: PHSS_26973 — Chinese-Simplified: PHSS_26975 — Chinese-Traditional: PHSS_24977 — Font Server: PHSS_25092 Before you use the Event Browser, install a patches on all HP-UX nodes in the clusters that will send the SNMP traps to your Serviceguard Manager Event Browser. The patch numbers are: • PHSS_27858 for HP-UX 11.
IMPORTANT: The Java Runtime Environment version that Serviceguard Manager installs may need to be updated. See HPSBMA02445 SSRT090058 – HP-UX Running HP Serviceguard Manager, Remote Execution of Arbitrary Code and Other Vulnerabilities available at http://www.itrc.hp.com for more information. HP recommends that you install JRE 1.5.0.16 (or later), or JRE 1.6.0.04 (or later) available at: http://www.hp.com/go/java To update the Serviceguard Manager JRE on HP-UX: 1.
JAGaf92790: JRE security vulnerability in JRE 1.4.2_09 and earlier What was the problem? A security bulletin issued by Sun recommended to update to a version of the JRE after 1.4.2_09. An updated JRE will be bundled with Serviceguard Manager on all platforms to avoid this publicized security vulnerability. IMPORTANT: Although this problem was fixed in this Serviceguard Manager version, the Java Runtime Environment version that Serviceguard Manager installs may still need to be updated.
QXCR1000898799 SMH SSO section not rendered in SIM content frame on FireFox What is the problem? SMH cannot be opened correctly inside the SIM content frame on Firefox, due to the origin policy for JavaScript in Mozilla/Firefox. There is no fix for this problem in SMH, because it is a browser restriction. What is the workaround? There is no workaround for this problem.
JAGag09581 - SGMGR disallows modifying a package if it's name is a reserved word What was the problem? If a package has the name matching one of the following keywords then Serviceguard Manager will report an error when trying to modify the package: Serviceguard Keywords: accessControlPolicy filesystemResourceGroup commandManagedResource ipAddress customerDefinedScript lvmResourceGroup cvmDependency lvmVolumeGroup cvmDiskGroup managedResource cvmResourceGroup mdResourceGroup dependency metric
Service Command = /usr/bin/X11/xclock -title "My Xclock" When this is entered into the Service Command field and applied, the target control script in /etc/cmcluster//.sdf.sh would be found to contain: SERVICE_CMD[0]="/usr/bin/X11/xclock -title My Xclock" This command does not function, because if you try to invoke this, xclock would give a usage error. What is the workaround? There is no workaround.
available for the user. Even if a snmp agent dies on the backend, the polling should be able to refresh the data with a slight delay, depending on the polling interval setting which can be customized by the user. JAGaf45963 Cannot cmapplyconf from root from node in cluster What is the problem? Creating or modifying a cluster or package within Serviceguard Manager (equivalent to using the cmapplyconf command) may result in the inability for Serviceguard to resolve the source IP address to a valid IP Address.
1. 2. Log in as root. xfs should be running. To check this, run the following command: $ ps -ef | grep xfs You can tell xfs is running if the printout looks like the following: root 47 0 0 21:58:01 ? 0:01 vxfsd root 1806 1 0 21:59:19 ? 0:13 /usr/bin/X11/xfs - config /etc/X11/fs/config -port 7000 -daemon -quiet_if_addrinuse 3. 4. If xfs is not running, enter: $ /sbin/init.d/xfs start To make the setting permanent, so that it won't need to be restarted after a reboot, edit the /etc/rc.config.d/xfs file.
• application /javaws.exefont=symbol charset=fontspecific code=183 descr='[bull]' Second: When updating, you need to manually clear the Java Web Start cache on the SIM client side. It contains the .jar files downloaded from the server. Before installing the new Serviceguard Manager, clear the cache and the server will automatically download the new .jar files. JAGaf15152 Package with all nodes (*) causes problem when adding node to cluster.
JAGae69202 - Rarely, cannot start program when running on SUSE via ReflectionX What is the problem? Occasionally, an exception happens when using ReflectionX to remotely start Serviceguard Manager on SUSE Linux. (SUSE Linux is supported for English only.) What is the workaround? This is related to a problem in the Java Runtime Environment. There is no workaround. Often it will work if you try again.
JAGae40298 - Alerts and Tally for Status not always affected by filters What is the problem? The Alert icon on the toolbar and the Status title bar reflect the Show Clusters filter in the Alert page, but not the Search filter. What is the workaround? There is no workaround. JAGad80600 - Certain progress messages are not localized. What is the problem? Serviceguard Manager displays progress messages directly from Serviceguard as administration commands are processed.
