Complete the following steps to set up the SSH environment for Continentalclusters A.08.00 on all nodes of all clusters to be configured in a Continentalclusters:
1.Set a password for the Continentalclusters user, conclusr, on all nodes of all clusters to be configured in a Continentalclusters:
a.Log in as root user.
b.Set the password for conclusr on the node passwd conclusr
passwd conclusr
2.Setup SSH equivalence between the nodes in the Continentalclusters.
a.Log in to any node in the Continentalclusters as conclusr.
b.Create a text file and add the fully qualified domain names (FQDN) of all nodes in all clusters to be configured in the Continentalclusters.
For example consider a Continentalclusters with two sites, Site A and Site B, each having two nodes Node 1 and Node 2. Create a text file,
Node1.cup.hp.com
Node2.cup.hp.com
Node1.ind.hp.com
Node2.ind.hp.com
c.Run the following command to create and distribute the SSH keys. csshsetup
The SSH keys set up trust among all the Continentalclusters nodes. This command also prompts for the password of the user conclusr, for every node specified in the file created in step 2b. When prompted, enter the password.
After the keys are created and distributed, the SSH connection is tested. If any errors are detected in the SSH connection, then an error message is displayed. Rectify the error on the node, and run the following command:
csshsetup
To add a node to Continentalclusters, run the csshsetup command with the updated
NOTE: The csshsetup command uses the HOME environment variable to determine the location of the SSH directories and files. This command fails if the HOME variable is not set appropriately. If the HOME variable is empty or is not set, then run the following command to ensure that the csshsetup command works accurately:
export HOME=<home_dir_location>
3.The conclusr should have a USER_ROLE of MONITOR. Starting with Serviceguard version A.11.19, all users on a node have this role by default. To confirm if conclusr has MONITOR access, on each node that belongs to Continentalclusters, log in as conclusr and run the command /usr/sbin/cmviewcl.
In case conclusr does not have MONITOR access, the execution of the command will fail with the following error:$ /usr/sbin/cmviewcl Permission denied to 127.0.0.1 cmviewcl:
Building the Continentalclusters Configuration | 61 |