HP Enterprise Cluster Master Toolkit User Guide (5900-2131, December 2011)

to determine when a package has exceeded its restart limit as defined by the "service_restart"
parameter in the package control script.
To reset the restart counter execute the following command cmmodpkg [-v] [-n
node_name] -R -s service_name package_name
After setting up the Serviceguard environment, each clustered Sybase ASE Instance should
have the following files in the toolkit specific directories:
/etc/cmcluster/scripts/ecmt/sybase/tkit_module.sh
/etc/cmcluster/modules/ecmt/sybase/sybase (this is a
symbolic link)
/etc/cmcluster/modules/ecmt/sybase/sybase.1
/opt/cmcluster/toolkit/sybase/README
/opt/cmcluster/toolkit/sybase/SGAlert.sh
Adding the Package to the Cluster
After the setup is complete, add the package to the Serviceguard cluster and start it up.
cmapplyconf -P SYBASE0
cmmodpkg -e -n <node1> -n <node2> SYBASE0
cmmodpkg -e SYBASE0
If necessary, consult the Managing ServiceGuard manual available at http://www.hp.com/go/
hpux-serviceguard-docs —>HP Serviceguard manual for information on managing packages.
Configuring Access Roles
To restrict unauthorized users from viewing the values of package attributes, set appropriate roles
for users who manage the cluster and packages. Set the Sybase administrator password using the
SAPASSWD package attribute. Along with other package attributes, password set for the
SAPASSWD package attribute is also stored in the Cluster Database.
If you do not restrict access of users for the SAPASSWD package attribute, then unauthorized users
can use the cmviewcl command to view the Sybase administrator password. HP recommends to
granting access to users based only on their roles in managing the cluster and packages. Configure
Role Based Access (RBA) using the following configuration parameters in the cluster:
• USER_NAME
• USER_HOST
• USER_ROLE
Specify one of the following values for the USER_ROLE parameter:
Table 8 Parameters in USER_ROLE
DescriptionUser Role
Allowed to perform cluster and package view operations.MONITOR
Allowed to perform package administration, and use cluster and package view commands.PACKAGE_ADMIN
Allowed to perform cluster administration, package administration, and cluster and package view
operations.
FULL_ADMIN
Assign any of these roles to users who are not configured as root users. Root users are usually
given complete control on the cluster using the FULL_ADMIN value.
When any of these values are specified for users who are not root users, they can view the Sybase
administrator password using the cmviewclcommand. Only those users who are not configured
with any of these values cannot view the Sybase administrator password using the cmviewcl
command.
Adding the Package to the Cluster 67