HP Serviceguard Version A.11.17 Release Notes, March 2006 (revised)

Serviceguard Version A.11.17 Release Notes
Compatibility Information and Installation Requirements
Chapter 118
After you complete a rolling upgrade, be sure to create and save a copy of
the new configuration, using the cmgetconf command. If a cmapplyconf
is issued, you want to be sure it applies the newly migrated Access
Control Policies.
Newly installed Serviceguard
When you install Serviceguard for the first time on a node, you do not
have a cluster. Without cluster configuration, however, you cannot have
an Access Control Policy.
You can, however, create a cmclnodelist file to act as a “bootstrap” for
monitor access. Bootstrap files are useful if you are doing a rolling
upgrade, so the nodes with older versions can still access the newer
cluster nodes. Monitor access in a bootstrap file also means the node can
appear in Serviceguard Manager; you can see information about it in
Properties, and you can configure it into a cluster after you give the root
password.
To create a bootstrap file:
1. Create the file /etc/cmcluster/cmclnodelist on the node.
2. Using any ascii editor, add a comment like this:
###################################################
# Do not try to configure access in this file.
# This is for bootstrapping only, before a cluster is configured.
# Once a cluster exists, Serviceguard will ignore this file.
####################################################
3. Below the comment, create monitor access. You can add a number of
<host_node> <user> pairs.
It may be easiest to add a wildcard + (plus) below the comment, to be
sure that any users from any Serviceguard node have at least the
monitor role. Do this with caution, however, because users who log in
from other Serviceguard nodes will automatically be granted the
same role/permissions that they have on their login node.
Using Serviceguard A.11.17 to reach earlier versions
For Serviceguard clusters with versions earlier than A.11.16, access is
granted in the cmclnodelist or .rhosts file. Only a root user can
modify these files to grant access.