HP-UX HB v13.00 Ch-15 - Serviceguard

HP-UX Handbook – Rev 13.00 Page 86 (of 108)
Chapter 15 Serviceguard
October 29, 2013
sure to list the cluster IP addresses at the top of the file.
11. For Serviceguard versions SG A.11.16 and later:
 If there is no /etc/cmcluster/cmclconfig file: Make sure /etc/cmcluster/cmclnodelist
contains the IP addresses of all cluster nodes and of all subnets the cluster nodes can
potentially talk on.
 If there is /etc/cmcluster/cmclconfig already: Make sure /etc/hosts resolves the
IP addresses of all cluster nodes and of all subnets the cluster nodes can potentially
talk on. Also make sure that each of these IP addresses has an alias that matches the
hostname of the host that owns the IP. Below is an example /etc/hosts file:
127.0.0.1 localhost loopback
16.53.34.95 Node1.bgr.hp.com Node1
16.53.34.100 Node2.bgr.hp.com Node2
12. In recent versions of Serviceguard, cmclconfd -c (and cmomd) makes use of the identd
service. Make sure access to the port 113/tcp is possible (listed as identd or auth port in
/etc/services or NIS). To verify that identd works correctly, use the following test
1) Choose a connection from netstat –an
# netstat -an | more
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address
(state)
[..]
tcp 0 0 127.0.0.1.60934 127.0.0.1.5304
ESTABLISHED
2) telnet to the identd port and enter the two port numbers, separated by comma.
# telnet localhost 113
Trying...
Connected to localhost.
Escape character is '^]'.
60934, 5304 <---- enter port numbers here
60934 , 5304 : USERID : UNIX :root <----- identd’s reply
Connection closed by foreign host.
To disabled identd usage on HP-UX add the '-i' option to the line of cmclconfd -c and
cmomd in /etc/inetd.conf on all cluster nodes and run inetd -c.
13. For versions of Serviceguard running on HP-UX 11.11 that make use of the security
enhancements, make sure you have version 2.7.4 or later of identd installed. Check by
doing: