HP-UX HB v13.00 Ch-15 - Serviceguard

HP-UX Handbook Rev 13.00 Page 73 (of 108)
Chapter 15 Serviceguard
October 29, 2013
In all reality, it is easier leave the file generic and simply ignore the boot-time error messages
than it is to try to remember this file when adding VGs.
Networking related Problems
Networking problems can be devided into 2 classes
Serviceguard commands fail
Network connectivity fails
Serviceguard commands fail
Serviceguard commands are processed by cmclconfd, which is activated by inetd. Cmclconfd is
also tied to identd, a daemon included with the sendmail software. If identd cannot match the
packet IP to an an authorized hostname, the command is aborted. The common solutions are:
Load /etc/cmcluster/cmclnodelist on each node
Insure /etc/inetd.conf has correct hacl-cfg lines.
hacl-probe stream tcp nowait root /opt/cmom/lbin/cmomd
/opt/cmom/lbin/cmomd -i -f /var/opt/cmom/cmomd.log -r /var/opt/cmom
hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd -p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd -c -i
Insure /etc/hosts identifies all IPs hosted by each node, and alias all IPs to the host
nodename.
Insure /etc/nsswitch.conf searches files before dns.
Insure /var/adm/inetd.sec does not deny hacl-cfg or registrar for the affected nodes
Insure /etc/opt/sec_mgmt/bastille/config does not prohibit hacl activity
Insure the random number generator driver is loaded and /dev/*random files exist.
kill the ‘cmclconfd –p’ if any and reset inetd (inetd k ; inetd).
Examples follow:
Example 1
Error: Unable to determine the nodes on the current cluster.
Error: Unable to communicate with node Node1.
Serviceguard's cmclconfd does authorization checks before servicing Serviceguard commands.
The cmclconfd daemon is activated by inetd, so it is a good idea to also check
/etc/inetd.conf, /etc/services and /var/adm/inetd.sec. Correct /etc/inetd.conf
entries look like this:
hacl-cfg dgram udp wait root /usr/lbin/cmclconfd cmclconfd p
hacl-cfg stream tcp nowait root /usr/lbin/cmclconfd cmclconfd c
These are the valid /etc/services entries:
clvm-cfg 1476/tcp # HA LVM configuration hacl-hb 5300/tcp # High Availability
(HA
hacl-gs 5301/tcp # HA Cluster General Services