OSF DCE Administration Guide--Core Components

Handling Network Reconfigurations
To verify that the slave is deleted, issue the dcecp registry catalog command. When the
master has received the request to delete the slave, the slave appears on the replica list as
marked for deletion. When the replica has actually been deleted, it no longer appears on
the list.
37.3 Handling Network Address Changes
When secd starts, master and slave replicas can detect address changes and can perform
the necessary updates to the master’s replica list and to the cell namespace. Generally,
all that is required on your part to handle network address changes is to update the
pe_site file. However, if the network address of the master and a slave replica change
simultaneously, your intervention is required. This subsection describes how to update
the pe_site file and how to handle simultaneous address changes.
37.3.1 Updating the pe_site File
Whenever the master’s or a slave’s network address changes, you must update the
/opt/dcelocal/etc/security/pe_site file on that host before restarting secd. This file, which
exists on each machine in the cell, is required for binding by the DCE Security Service to
itself. For the master replica, the file contains the cell name and the name of the master.
For slave replicas, the file contains the cell name, the name of the master replica, and the
name of the replica itself.
If the master replica address changes, update the pe_site file on every node in the cell
that runs a security server (including the master) with the new address for the master. If
a slave address changes, update only that slave’s pe_site file to reflect its changed
address.
37.3.2 Handling Simultaneous Address Changes
If an address change occurs simultaneously for the master replica and a slave replica, the
master and slave will not be able to reach each other while both are trying to notify the
other of the changed address. To avoid this problem, make sure the address change of
one replica (either master or slave) is propagated to all replicas before the other address
is changed. Make one address change. Then, use the dcecp registry show -replica
command to view the replica list at both the master site and the slave replica site. When
the new address is displayed, on both replica lists, it is safe to proceed with the next
network address change.
If you are unable to prevent simultaneous network address changes for the master and a
slave, the only way to restore communication between the master and slave is to delete
the slave, then recreate it. Delete the slave by using one of the following methods,
depending on your circumstances:
124243 Tandem Computers Incorporated 37−3