Managing Serviceguard Eighteenth Edition, September 2010

NOTE: cmclnodelist is created automatically by cmpreparecl (1m)

(orcmpdeploycl (1m), which calls cmpreparecl). You can skip the rest of this

subsection if you have used, or plan to use, either of these commands. See “Using Easy

Deployment Commands to Configure the Cluster” (page 211).

You may want to add a comment such as the following at the top of the file:

###########################################################

# Do not edit this file!

# Serviceguard uses this file only to authorize access to an

# unconfigured node. Once the node is configured,

# Serviceguard will not consult this file.

###########################################################

The format for entries in cmclnodelist is as follows:

For example:

gryf root #cluster1, node1

sly root #cluster1, node2

bit root #cluster1, node3

This example grants root access to the node on which this cmclnodelist file resides

to root users on the nodes gryf, sly, and bit.

Serviceguard also accepts the use of a “+” in the cmclnodelist file; this indicates that

the root user on any Serviceguard node can configure Serviceguard on this node.

IMPORTANT: If $SGCONF/cmclnodelist does not exist, Serviceguard will look at

~/.rhosts. HP strongly recommends that you use cmclnodelist.

NOTE: When you upgrade a cluster from Version A.11.15 or earlier, entries in

$SGCONF/cmclnodelist are automatically updated to Access Control Policies in the

cluster configuration file. All non-root user-hostname pairs are assigned the role of

Monitor.

Ensuring that the Root User on Another Node Is Recognized

The HP-UX root user on any cluster node can configure the cluster. This requires that

Serviceguard on one node be able to recognize the root user on another.

Serviceguard uses the identd daemon to verify user names, and, in the case of a root

user, verification succeeds only if identd returns the username root. Because identd

may return the username for the first match on UID 0, you must check /etc/passwd

Preparing Your Systems 217