HP Serviceguard Version A.11.
Legal Notices © Copyright 1998, 2014 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license. The information contained herein is subject to change without notice.
Contents Publishing History..........................................................................................6 1 Serviceguard Version A.11.20 Release Notes..................................................7 Announcements........................................................................................................................7 Platform Dependencies.........................................................................................................7 March 2012 Patch..................
Easy Deployment...........................................................................................................18 Advantages of Easy Deployment.................................................................................18 Limitations of Easy Deployment...................................................................................18 Halting a Node or the Cluster while Keeping Packages Running (Live Application Detach)......19 What You Can Do................................................
Port Requirements...............................................................................................................40 Ports Required by Serviceguard Manager.........................................................................41 System Firewalls.................................................................................................................41 Installing Serviceguard on HP-UX..............................................................................................
Publishing History Table 1 Publishing History Publishing Date Part Number Edition March 2012 689163-001 First Edition This new edition provides information on the Serviceguard A.11.20 March 2012 patch that adds new features to it, as well as features first added in A.11.20 and its subsequent patches, and in patches to A.11.19.
1 Serviceguard Version A.11.20 Release Notes Announcements This section announces the most important features and limitations of Serviceguard A.11.20. For more information, see “What’s in this Release” (page 12). NOTE: These Release Notes also include information about features first introduced in A.11.19 patches; see “Features First Introduced in Serviceguard A.11.19 Patches” (page 29). Platform Dependencies IMPORTANT: This new version of Serviceguard is supported on 11i v3 only.
Serviceguard Optional Products Not Bundled The following optional product is not bundled with Serviceguard, but is delivered free with Serviceguard on the Serviceguard Distributed Components CD, and can also be downloaded from http://www.hp.com/go/softwaredepot/ha: • Quorum Server, and the Quorum Server Version A.04.00 Release Notes. Serviceguard A.11.19 Is the Required Basis for Rolling Upgrades A.11.
Quorum Server Upgrade Required if You Are Using an Alternate Address If you are using an alternate address on a Serviceguard version earlier than A.11.19, you must upgrade the Quorum Server to version A.04.00 before you upgrade the cluster. See About the Alternate Quorum Server Subnet (page 31) for more information. CAUTION: If you fail to do this, the upgraded cluster will be running without a cluster lock until you have upgraded the Quorum Server.
STORAGE_GROUP Deprecated The STORAGE_GROUP parameter (in the package configuration file for legacy packages) is deprecated as of Serviceguard A.11.19. Support for it will be withdrawn in a future release.
Parallel SCSI Not Supported for Lock LUN The lock LUN functionality does not support parallel SCSI; you must use Fibre Channel for a lock LUN. If you need to use parallel SCSI, use an LVM cluster lock disk, or a Quorum Server. For more information about the cluster lock, see “Cluster Lock” in Chapter 3 of the latest edition of Managing Serviceguard.
Native Multipathing, Veritas DMP, and Related Features in HP-UX 11i v3 The HP-UX 11i v3 I/O subsystem provides multipathing and load balancing by default. This is often referred to as native multipathing. Veritas Volume Manager (VxVM) and Dynamic Multipathing (DMP) from Symantec are supported on HP-UX 11i v3, but do not provide multipathing and load balancing; DMP acts as a pass-through driver, allowing multipathing and load balancing to be controlled by the HP-UX I/O subsystem instead.
See the subsections that follow for details; see also the “Announcements” (page 7). For information about documentation, see “Documents for This Version” (page 34). New Features for A.11.20 March 2012 Patch Serviceguard A.11.
• New capabilities in Serviceguard and HPVM allow online migration of a virtual machine. See the section “Online VM Migration with Serviceguard” in the white paper Designing high-availability solutions with HP Serviceguard and HP Integrity Virtual Machines, at http:// www.hp.com/go/hpux-serviceguard-docs —> HP Serviceguard —> White papers. • Serviceguard A.11.20 supports a new failover policy, site_preferred_manual, which prevents automatic failover of a package across SITEs.
• You can use the FSWeb utility to configure LVM volumes in a Serviceguard cluster (and SLVM volumes if the add-on product Serviceguard Extension for Real Application Cluster (SGeRAC) is installed). For more information about FSWeb, see the fsweb (1m) manpage. • Serviceguard supports the following recently added HP-UX 11i v3 capabilities: ◦ Dynamic Root Disk (DRD); see “Upgrade Using DRD” (page 44). See also “What’s Not in this Release” (page 15).
Rules and Limitations Serviceguard automatically implements PR for packages using volume groups configured on a LUN storage, subject to the following guidelines: • The LUN device must support PR and be consistent with the SPC-3 specification. • PR is enabled for packages with iSCSI disks, but disabled for packages with non-iSCSI disks. • Packages with a mix of iSCSI and non-iSCSI disks are not supported. • iSCSI is only supported with modular packages.
Advantages of Generic Resources • Custom defined monitors can also be integrated. • Provides better control, options, and flexibility in terms of getting and setting the status of a resource. • With generic resources, different kind of monitoring mechanism can be used and these can co-exist in a single package.
Support for Veritas 5.1 SP1 on HP-UX 11i v3 Only IMPORTANT: For information about patches required to support HP Storage Management Suite (SMS) bundles see the HP Serviceguard Storage Management Suite Release Notes for your version of the Storage Management Suite at http://www.hp.com/go/hpux-serviceguard-docs —> HP Serviceguard Storage Management Suite A.04.xx (with 5.1 SP1 Veritas). • Serviceguard A.11.20 on HP-UX 11i v3 with the April 2011 patches or later supports version 5.
• Does not discover or configure a quorum server (but can deploy one that is already configured). • Does not support asymmetric network configurations (in which a given subnet is configured only on a subset of nodes). • When cmdeploycl (1m) is used on a cluster where SGeRAC is installed, cmdeploycl (1m) provides a warning if the cluster being deployed does not meet SGeRAC specific requirements. For more information and instructions, see “Using Easy Deployment” in chapter 5 of Managing Serviceguard.
Cluster-wide Device Special Files (cDSFs) Under agile addressing on HP-UX 11i v3, each device has a unique identifier as seen from a given host; this identifier is reflected in the name of the Device Special File (DSF). See “About Device Special Files (DSFs)” (page 32) for more information.
• cDSFs are not supported with NPIV storage. • cDSFs are not supported by Ignite-UX in a Serviceguard Cluster environment. Volume groups configured with a cDSF will not be archived using Ignite-UX recovery archive creation tools. For more information, see the latest Ignite-UX Frequently Asked Questions document at http:// www.hp.com/go/ignite-ux-docs.
NOTE: • All of the checks below are performed when you run cmcheckconf (1m) without any arguments (or with only -v, with or without -k or -K). cmcheckconf (1m) validates the current cluster and package configuration, including external scripts and pre-scripts for modular packages, and runs cmcompare (1m) to check file consistency across nodes. (This new version of the command also performs all of the checks that were done in previous releases.) • These new checks are not done for legacy packages.
• Redundant storage paths functioning properly • Kernel parameters and driver configurations consistent across nodes • Mount point overlaps (such that one file system is obscured when another is mounted) • Unreachable DNS server • Consistency of settings in .rhosts and /var/admin/inetd.
• Only NFS client-side locks (local locks) are supported. Server-side locks are not supported. • Because exclusive activation is not available for NFS-imported file systems, you should take the following precautions to ensure that data is not accidentally overwritten. ◦ The server should be configured so that only the cluster nodes have access to the file system. ◦ The NFS file system used by a package must not be imported by any other system, including other nodes in the cluster.
The LVM and VxVM Volume Monitor Simply monitoring each physical disk in a Serviceguard cluster does not provide adequate monitoring for volumes managed by Veritas Volume Manager from Symantec (VxVM), or logical volumes managed by HP-UX Logical Volume Manager (LVM), because a physical volume failure is not always a critical failure that triggers failover (for example, the failure of a mirrored volume is not considered critical).
• Korean • Traditional Chinese • Standard French • Standard German • Standard Italian • Standard Spanish What You Can Do Depending on your SMH and Serviceguard security privileges, you can do the following: • Monitor, create, modify, run, and halt a cluster. • Monitor, run, and halt nodes. • Create and modify failover and multi-node packages, including configuring package dependencies. You can also modify Auto Run and Node Switching settings.
HP Serviceguard Manager version B.03.30 supports Serviceguard A.11.20 on HP-UX 11i v3. The following are new capabilities in B.03.30: • iSCSI storage support with Persistent Reservations ◦ • HP-UX vPars and Integrity Virtual Machines 6.1 support ◦ • Users can choose to abort the halting of a package when failures occur in user-defined modules. Online reconfiguration of mount point and disk group packages ◦ • Support for Sybase ASE as a database in SGeSAP package configuration.
Current Limitations of Serviceguard Manager You can only monitor a Continentalcluster, but cannot configure or administer it. Browser and SMH Issues Pages Launched into New Window rather than Tabs with Firefox Tabbed Browsing By design, the Serviceguard Manager logging windows are launched with a pre-specified window size that will not obscure the original window when they are displayed.
• Version B.5.5.23.02 or later of the hpuxswTOMCAT product. hpuxswTOMCAT is installed by default with HP-UX. To check that it is on your system, use a command such as: swlist -l fileset | grep TOMCAT • Version A.3.0.1, or a higher version of A.3.0., of SMH (System Management Homepage), for HP–UX 11i v3. • A web browser (Internet Explorer 6.0 or higher or Firefox 2.0 or higher) with access to SMH. • Have launched SMH (settings -> Security -> User Groups) to configure user roles for SMH.
• New -K option for cmgetconf. This causes cmgetconf to skip probing of volume groups, allowing the command to complete faster; the resulting cluster configuration file will not contain a list of cluster-aware volume groups. See cmgetconf (1m) for more information. • Support for Shared LVM (SLVM) in an HPVM environment only — that is, when the cluster includes virtual machines (either as nodes or within packages) that are managed by HPVM. For more information, see HP-UX vPars and Integrity VM V6.
concurrent_vgchange_operations, controls how many volume groups the package can activate simultaneously. IMPORTANT: Make sure you read the configuration file comments for both concurrent_vgchange_operations and enable_threaded_vgchange before configuring these options, as well as the vgchange (1m) manpage. About the Alternate Quorum Server Subnet Serviceguard A.11.20 allows you to configure an alternate subnet for communication between the cluster nodes and the Quorum Server.
HPVM 4.1 Support for Windows 2008 Guests HPVM 4.1 supports Windows 2008 guests, and you can use cmappmgr to monitor processes on these guests. To enable this capability you need to do the following: • Install the HPVM 4.1 July 2012 patches. See the latest version of the HP Integrity Virtual Machines Version 4.1 Release Notes, which you can find on http://www.hp.com/go/hpux-hpvm-docs. • Install the Windows 2008 guest operating system on the host.
NOTE: It is possible, though not a best practice, to use legacy DSFs on some nodes after migrating to agile addressing on others; this allows you to migrate different nodes at different times, if necessary. For more information about agile addressing, see following documents at http://www.hp.
IMPORTANT: This additional timeout extension represents a net addition to the time it takes for the cluster to re-form. For example, if the cluster typically took 40 seconds to re-form before any VM nodes were added, it will take about 80 seconds when one or more VM nodes are members of the cluster, if all those nodes have a VM guest depot. If any VM node without a VM guest depot is a member of the cluster, it will take about 110 seconds.
The following documents, which can all be found at http://www.hp.com/go/ hpux-serviceguard-docs, are particularly useful. • Managing Serviceguard A.11.20. This manual has been revised for the current A.11.20 March 2012 patch. • HP Serviceguard Quorum Server Version A.04.00 Release Notes • Serviceguard Extension for RAC Version A.11.
Compatibility Information and Installation Requirements Read this entire document (and any other Release Notes or READMEs for related products you may have) before you begin an installation. Compatibility For complete compatibility information see the Serviceguard/SGeRAC/SMS/Serviceguard Manager Plug-in Compatibility and Feature Matrix posted at http://www.hp.com/go/hpux-serviceguard-docs. Mixed Clusters “Mixed cluster” has several meanings in the context of Serviceguard.
For more information about mixed-hardware-architecture clusters, see Configuration Rules for a Mixed HP 9000 /Integrity Serviceguard Cluster at http://www.hp.com/go/hpux-serviceguard-docs. Mixed HP-UX Operating-System Revisions A Serviceguard A.11.19 cluster can contain a mix of nodes running HP-UX 11i v2 and 11i v3, with certain restrictions. You may want to take advantage of this fact when preparing to upgrade the cluster to A.11.
It is also possible to upgrade the HP-UX version without upgrading Serviceguard, and so avoid the rolling upgrade restrictions. In this case you must make sure that: • The Serviceguard version bundled with the HP-UX Operating Environment (OE) matches the version already installed. CAUTION: You need to pay careful attention to the Serviceguard patch level as well as the Serviceguard version.
• If you are updating nodes from HP–UX 11i v2 to 11i v3, you must use update-ux; cold install is not supported in this context. • If you are updating nodes from HP–UX 11i v2 to 11i v3, and the Serviceguard version bundled with the HP-UX Operating Environment (OE) is later than the one already installed, rolling upgrade restrictions apply (see “Rules and Restrictions for Clusters in Transition” (page 37)).
pass in quick proto tcp from any to any port = 2301 pass in quick proto tcp from any to any port = 2381 pass in quick from to any pass out quick from any to In the above rules, are all nodes in the cluster, including the local node. The ipf.customrules file is located under the Bastille directory itself. IPFilter-Serviceguard rules are documented in the latest HP-UX IPFilter Administrator’s Guide, which you can find under http://www.hp.
• hacl-probe 5303/udp • hacl-local 5304/tcp • hacl-local 5304/udp • hacl-test 5305/tcp • hacl-dlm 5408/tcp Serviceguard also uses port identd 113/tcp for user verification and to authenticate Serviceguard commands. For more information about identd, see the white paper Securing Serviceguard at http://www.hp.com/go/hpux-serviceguard-docs —> HP Serviceguard, and the identd (1M) manpage.
CAUTION: • This release of Serviceguard requires 11i v3. If you are already running earlier versions of Serviceguard and HP-UX, see “Upgrading from an Earlier Serviceguard Release” (page 43) for more information. • If you intend to use an alternate Quorum Server subnet “About the Alternate Quorum Server Subnet” (page 31), and the new cluster will use an existing Quorum Server, make sure you are running Quorum Server version A.04.00.
NOTE: There are files in CM-CORE that are reserved for HP support. Do not change these files. Do not move, alter, or delete the following: • /usr/contrib/bin/cmcorefr • /usr/contrib/bin/cmdumpfr • /usr/contrib/bin/cmfmtfr • /usr/contrib/Q4/lib/q4lib/cmfr.pl • /var/adm/cmcluster/frdump.cmcld.x (where x is a digit) NOTE: If you did a swremove of an older version of Serviceguard before the swinstall, a zero-length binary configuration file (/etc/cmcluster/cmclconfig) may be left on your system.
• If you are upgrading both the Quorum Server and Serviceguard, upgrade the Quorum Server before you upgrade Serviceguard. CAUTION: If you are using an alternate Quorum Server subnet (page 31), and you are not already running Quorum Server version A.04.00, you must upgrade to version A.04.00 before you proceed; see “Quorum Server Upgrade Required if You Are Using an Alternate Address” (page 9). • If you are upgrading from a release earlier than A.11.16, see “Access changes as of A.11.16” (page 34).
Restrictions for DRD Upgrades • DRD is available only on HP-UX 11i v3. • As of the date of these release notes, the only paths that are supported for DRD upgrade are: ◦ ◦ from Serviceguard version A.11.18 with patch PHSS_37602 (or a later cumulative patch) to: – A.11.19 – an A.11.19 patch release – A.11.20 – an A.11.20 patch release from Serviceguard version A.11.19 to: – an A.11.19 patch release – A.11.20 – an A.11.
• The cluster must meet both general and release-specific requirements for a rolling or non-rolling upgrade; see the remainder of this section and the sections “Guidelines for Rolling Upgrade” and “Guidelines for Non-Rolling Upgrade” in Appendix D of the latest edition of Managing Serviceguard.
Rolling upgrade to Serviceguard A.11.19 is supported only if you are upgrading from: • Serviceguard A.11.15 or greater on HP Integrity systems running HP-UX 11i v2 or 11i v3; or • Serviceguard A.11.16 or greater on HP 9000 systems running HP-UX 11i v2 or 11i v3. IMPORTANT: If you are upgrading from A.11.16 on HP-UX 11i v2, you must first install patch PHSS_31072 or a later patch.
Uninstalling Serviceguard To uninstall the Serviceguard software, run the SD-UX swremove command. Before removing software, note the following: 1. Serviceguard must be halted (not running) on the node from which the swremove command is issued. 2. The system from which the swremove command is issued must be removed from the cluster configuration. (If the node is not removed from the cluster configuration first, swremove will cause the current cluster to be deleted.) 3.
operation returns CRA_SYS_CRITICAL. You will encounter this problem on an unpatched HP-UX 11i v3 system whether you use the Peripheral Device Tool (pdweb) or the HP-UX olrad command. Workaround: Apply patch PHNE_35894. (See “Patches for this Version” (page 48) for more information about patches.) NOTE: You can apply the patch without a reboot. On a system to which the patch has been applied, you will be able to perform online replacement of hot-swappable cards (without bringing down the cluster).
Toolkit module page, irrespective of the SGeRAC patch PHSS_42561 installed. • QXCR1001225023: While creating or editing a MountPoint or DiskGroup package from ServiceGuard Manager, Edit option is not available for the configured attributes in the below mentioned tables: ◦ CVM Disk Groups ◦ CFS Mount Points ◦ CFS Checkpoints ◦ CFS Snapshots The following defects have been fixed in Version B.03.
The error message is displayed even after the user revert the selection of checkbox. User will not be able to perform any action until the textbox is cleared. • QXCR1001217581: User can define roles during cluster configuration. Serviceguard Manager is not parsing the roles defined and hence not populating the values in the Roles tab. The following defects have been fixed in Version B.03.
• QXCR1001187395: Tomcat log file size increasing due to package ascii file in Serviceguard Manager • QXCR1001179479 : Incorrect error message for run pkg action on dependent package • QXCR1001178843: While creating dependency package, dependency status is showing as package status • QXCR1001050894: Verify sum of halt timeout parameter value of services in service module page • QXCR1001090995 : HANFS toolkit config page should not have * symbol if the parameter is not mandatory • QXCR10011486
• QXCR1001199462: SGMgr PI does not show up in menu after installing PHSS_42556 • QXCR1001190875: Support for DB2HADR POC Changes in Serviceguard Manager • QXCR1001193372: Enhancement to add the help note on online VM migration via specific LAN • QXCR1001191486: User defined DB services support for oracle DB and RAC DB packages through Serviceguard Manager • QXCR1001180071: Improve the Serviceguard Manager screen auto-refresh time by optimizing the scripts Additional fixes are listed in the patch
• QXCR1001166575: cmappmgr and cmappserver messages are too long • QXCR1001127034: cmmakepkg error message lacks detail • QXCR1001113972: cmmodnet fails adding valid IP address ending on 255 • QXCR1001112796: cmquerycl does not detect IP monitor gateways on 11.
These releases are supported for an extended period of time, determined by HP. Patches will be made available within the extended support time frame even though a newer version of Serviceguard is available. Serviceguard A.11.20 is a platform release. NOTE: For compatibility information for this and earlier releases, see the Serviceguard Compatibility and Feature Matrix at the address given under “Documents for This Version” (page 34).
Native Languages Serviceguard Manager provides Native Language Support, but the command-line interface does not. IMPORTANT: Even though the command-line interface does not provide Native Language Support, Serviceguard functions correctly whether or not the LANG variable is set to C. See “Serviceguard Manager” (page 25) for a list of the languages supported by Serviceguard Manager.
