HP UX System Adstration specification

82

Image 82

HP UX System Adstration manual

Contents

Distributed Systems Administration Utilities Users Guide Copyright 2009 Hewlett-Packard Development Company, L.P Table of Contents HP-Supported Open Source pdsh Options Index Syslog-ngLog-Forwarding Configuration List of Figures Target Node Error Messages Consolidated Logging CommandsList of Tables Typographic Conventions About this DocumentIntended Audience Related Information Product Support HP Encourages Your Comments Introduction Consolidated Logging Commands Distributed Systems Administration Utilities CommandsConfiguration Synchronization Command Command Fanout Commands Open Source pdsh Commands Utility Setup CommandOpen Source cfengine Commands Open Source Components Open Source syslog-ng Command Distributed Systems Administration Utilities Manual PagesDsau Manual Page Sections Configuration Synchronization Cfengine Overview Cfengine Daemons and Commands Configuration Synchronization Cfengine Master Server Deployment Models Cfengine Overview Configuring cfengine Using the Configuration Synchronization Wizard # /opt/dsau/sbin/csyncwizard Configuration Data for csyncwizardWizard displays the following introductory screen Wizard proceeds to configure the system as a master server # /opt/dsau/sbin/csyncwizard Configuration Synchronization Configuring cfengine Would you like to manage clients? N Cluster Configuration Notes for cfengine Serviceguard Automation Features Var/opt/dsau/cfengine/inputs directory Using the Wizard to Configure a Synchronization Client Opt/dsau/bin/csyncdispatcher Memberadded newhost Manual Configuration When prompted, enter the name of the client to add Start by creating the directory Manually Configuring a Standalone Synchronization Server# mkdir -p /var/opt/dsau/cfenginemaster/inputs # /opt/dsau/sbin/cfkey # /var/opt/dsau/cfengine/ppkeys # cp localhost.pub root-10.0.0.5.pub # cfrun -- --inform # /sbin/init.d/cfservd start# cfagent --no-lock --verbose --no-splay # cfrun -v -- --verbose Initial Serviceguard Package Preparation # mkdir -p /csync/dsau/cfenginemaster/masterfiles Policyhost = csync.abc.xyz.com List Managed Clients in cfrun.hosts Edit the cfservd.conf File # /opt/dsau/sbin/cfkey # ccp * /var/opt/dsau/cfengine/ppkeys # ccp /etc/rc.config.d/cfservd /etc/rc.config.d/cfservd# cp localhost.pub root-192.10.25.12.pub # cexec /sbin/init.d/cfservd start Apply the package and start it Test the configuration by performing the following steps# ccp csync csync.conf /etc/cmcluster/csync # cmapplyconf -P csync.conf # cmmodpkg -e csync Configuring a Synchronization Managed Client On a managed client, use the command Security Notes Choosing a Synchronization Invocation Method Encryption Key ExchangeCsync Network Port Usage Encryption Checksum alerts Checksum Alerts Disabling Use of cfengineLogging Options # /sbin/init.d/cfservd stop #cfagent -K Cfengine TroubleshootingSyntax error due to missing or superfluous spaces Unable to connect to a cfengine client or master Cfagent -d, -d1, -d2, or -d3 cfservd Cfrun Syslog Message Format Consolidated LoggingIntroduction to syslog 2describes syslog Facilities Messages Message Filtering Log Consolidation OverviewImproved Log Consolidation Syslog Co-existence Etc/cmcluster/package-name/package-name.log Log Consolidation Configuration Syslog-ng Log Consolidator Configuration Configuration Data for clogwizard Using the Log Consolidation WizardOpt/dsau/sbin/clogwizard Answer yes y or press Enter. The next question is Where N is the expected number of clientsAnswer yes y. The wizard then prompts If these choices are correct, continue Next prompt is Log files that reside on this cluster can be consolidated Consolidated package logs would be located here Cluster Configuration Notes for clog Minimizing Message Loss During Failover Configuring a Log Forwarding Client Using clogwizard Or press Enter. The next question is Enter the ssh port to be used for port forwarding Manually Configuring Log Consolidation Manually Configuring a Standalone Log Consolidation Server Replace the %UDPLOOPBACKLOG% token with # /sbin/init.d/syslogd stop # /sbin/init.d/syslogd startFor example, for TCP If using the TCP protocol, add Create the following symbolic linkChange the Clogconfigured line to Add the following lines Log Consolidation Configuration SYSLOGDOPTS=-D -N KEEPALIVE% tokens with appropriate values UDPLOOPBACKSOURCE% and %UDPLOOPBACKLOG% tokens If consolidating package logs of this cluster, add Creating the clog Package If using VxVM, comment out the LVM Volume Group line Distribute it cluster-wide Testing and Starting the clog PackageThen use cmviewcl to make sure it is running Using VxVM Instead of LVM Manually Configuring Log Forwarding ClientsManually Configuring a Standalone Log Forwarding Client Ln -sf /etc/syslog-ng.conf.client /etc/syslog-ng.conf # /sbin/init.d/syslog-ng start # cpp /etc/rc.config.d/syslogd /etc/rc.config.d Destination dsyslog%TYPE% %TYPE%%IP%port%PORT% Otherwise, if using the UDP protocol, add If using the TCP protocol, add the following linesIf using ssh port forwarding, add Create the following symbolic link on each cluster member Start syslog-ngon all cluster members using Forwarding Ascii Log Data For the destination line For the filter line Consolidating Package Logs on the Log Consolidation Server For the log line Disabling a Standalone Log Consolidation System Perform the following steps to disable log consolidationDisabling Log Consolidation #/sbin/init.d/syslogd stop #/sbin/init.d/syslogd start Disabling a Serviceguard Cluster Log Consolidation SystemDisabling a Standalone Log Forwarding Client # /sbin/init.d/syslog-ng stop Disabling a Serviceguard Cluster Log Forwarding Client #/sbin/init.d/syslogd stop #/sbin/init.d/syslogd start Log File Protections Securing Consolidated LogsSsh Port Forwarding Clog Network Port Usage Using Bastille to Harden the System# cd /opt/ssh/etc # ccp sshhost* /opt/ssh/etc Starting System Management Homepage Using the System and Consolidated Log ViewerViewing System and Consolidated Logs To log in to the System Management Homepage, navigate to Viewing System and Consolidated Logs Page Command Fanout Parallel Distributed Shell Systems Pdsh Utility WrappersAll nodes Cwall displays a wall1M broadcast message on multiple hosts Ssh Security Setup Security ConfigurationRemote Shell Security Setup # csshsetup -r -f memberslist.txt Rsh Command Messages Command Fanout TroubleshootingSsh Command Messages Target Node Error Messages HP-Supported Open Source pdsh Options Page Index Cfanouthosts LVM UDP