Solved

AIX kerberos principal in pssp environment

Posted on 2004-09-01
4
1,177 Views
Last Modified: 2013-11-17
I have an IBM cluster 1600 configured with pssp 3.5, I've just upgraded the CWS from aix51 to aix52, probably I've misconfigured the network the first boot, now the kerberos principal seen by cluster nodes is the externa IP address of the CWS, is ther a simple way to change this ?

When running spauthconfig on cluster nodes I get the following messages:
rshd: 0826-811 The remote user login is not correct.
host: address XXX.XXX.XXX.XXX NOT FOUND
rshd: 0826-811 The remote user login is not correct.

XXX.XXX.XXX.XXX is the external ip address of CWS, not the one on SPlan, this is because I've removed
the line from /etc/hosts.
If the line is uncommented I just get 4 times:
rshd: 0826-811 The remote user login is not correct.

I believe SDR contains wrong informations about CWS, but I really don't know where to look for this info,
any hint ?

thanks.

_tack
0
Comment
Question by:_tack
  • 2
  • 2
4 Comments
 
LVL 3

Author Comment

by:_tack
ID: 11957827

..
I believe SDR contains wrong informations about CWS, but I really don't know where to look for this info,
any hint ?
..

Found this: SDRGetObjects SP

now comes the kerberos part...
0
 
LVL 61

Accepted Solution

by:
gheist earned 250 total points
ID: 11965940
Clusters customize many files in /etc/security/
I've heard of clusters breaking even with ML installs, now you have chance to restore working system from backup and rethink the way you upgrade.
0
 
LVL 3

Author Comment

by:_tack
ID: 11970519
Gheist,
thanks for the answer, this is what I was trying to avoid, but if it's the only solution I'll do it.

_tack
0
 
LVL 61

Expert Comment

by:gheist
ID: 12016137
Even official techies sometimes fail at upgrading ....
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I promised to write further about my project, and here I am.  First, I needed to setup the Primary Server.  You can read how in this article: Setup FreeBSD Server with full HDD encryption (http://www.experts-exchange.com/OS/Unix/BSD/FreeBSD/A_3660-S…
Using libpcap/Jpcap to capture and send packets on Solaris version (10/11) Library used: 1.      Libpcap (http://www.tcpdump.org) Version 1.2 2.      Jpcap(http://netresearch.ics.uci.edu/kfujii/Jpcap/doc/index.html) Version 0.6 Prerequisite: 1.      GCC …
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now