Veritas Storage Foundation 5.1 SP1 Cluster File System Installation Guide (5900-1510, April 2011)

■ If the output displays the principal account on root broker for the
authentication broker on the node, then delete the existing principal
accounts. For example:
venus> # vssat deleteprpl --pdrtype root \
--domain [e-mail] \
--prplname galaxy --silent
■ If the output displays the following error, then the account for the given
authentication broker is not created on this root broker:
"Failed To Get Attributes For Principal"
Proceed to step 3.
3
Create a principal account for each authentication broker in the cluster. For
example:
venus> # vssat addprpl --pdrtype root --domain \
[e-mail] --prplname galaxy \
--password password --prpltype service
You must use this password that you create in the input file for the encrypted
file.
Creating encrypted files for the security infrastructure
Create encrypted files (BLOB files) only if you plan to choose the semiautomatic
mode that uses an encrypted file to configure the Authentication Service. The
administrator must create the encrypted files on the root broker node. The
administrator must create encrypted files for each node that is going to be a part
of the cluster before you configure the Authentication Service for SFCFS.
To create encrypted files
1
Make a note of the following root broker information. This information is
required for the input file for the encrypted file:
The value of the root hash string, which consists of 40
characters. Execute the following command to find
this value:
venus> # vssat showbrokerhash
hash
79Preparing to configure SFCFS
Preparing to configure the clusters in secure mode