HP-UX HB v13.00 Ch-15 - Serviceguard

HP-UX Handbook Rev 13.00 Page 79 (of 108)
Chapter 15 Serviceguard
October 29, 2013
# ls -l /dev/*random
cr--r--r-- 1 bin bin 62 0x000000 Nov 19 18:09 /dev/random
cr--r--r-- 1 bin bin 62 0x000001 Nov 19 18:09 /dev/urandom
# lsdev | grep 62
62 -1 rng pseudo
If the driver shown by lsdev grep'ing for the major number of the
/dev/urandom device file is not "rng" then Serviceguard will not
function correctly. Note that the actual major number can vary since
this number is dynamically allocated.
If the major number does not match, the device files should be corrected
or deleted before Serviceguard is started until a newer version of the
HP-UX Strong Random Number Generator is loaded. If /dev/urandom is not
present Serviceguard uses an alternate mechanism for generating random
numbers.
Problem: cmclconfd[####]: cmclconfd running with weak security (identd
disabled) in the syslog.log file.
When a system logs the above messages one or several conditions have been meet:
1) The new security feature has been disabled/bypassed using the /etc/inetd.conf file.
2) All the nodes in the configured cluster do not have the Serviceguard Security patch installed
properly.
3) All the nodes have not successfully formed a complete cluster
4) Optional: The -i’ option has been added to the hacl-cfg cmclconfd c line in
/etc/inetd.conf.
cmruncl : Cluster did not form. Check the syslog file for information.
The following is the output from cmruncl:
-----------------------------------------
# cmruncl -v
cmruncl : Validating network configuration...
Gathering configuration information .......... Done
cmruncl : Network validation complete
Successfully started $SGLBIN/cmcld on Node1.
Successfully started $SGLBIN/cmcld on Node2.
cmruncl : Waiting for cluster to form............
cmruncl : Cluster did not form. Check the syslog file for information.
The following is info from "/var/adm/syslog/syslog.log":
-----------------------------------------
Apr 2 11:38:55 db1 cmclconfd[####]: The ServiceGuard