Re: hostnmae changed (131 Views)
Reply
Regular Advisor
Ajin_1
Posts: 202
Registered: ‎06-09-2009
Message 1 of 4 (208 Views)

hostnmae changed

[ Edited ]

Hi Experts ,

 

Some user changed the hostnmae of our server  ,We have checked the history file and we are not able to trace the same

Any other options to find who did the same.Because of this cluster package went down.

 

there are no error message in syslog on when the cluster package went down ,

 

Does hostname change cause the cluster package Halt

 

Does this depend which parameter in cluster configuration file.

 

 

P.S. This thread has been moved from HP-UX>System Administration to HP-UX > Serviceguard. -HP Forum Moderator

 

Thanks & Regards
Ajin.S
Proverbs 3:5,6 Trust in the Lord with all your heart and lean not on your own understanding; in all your ways acknowledge him, and he will make all your paths straight.
Honored Contributor
Patrick Wallek
Posts: 13,777
Registered: ‎06-21-2000
Message 2 of 4 (163 Views)

Re: hostnmae changed

I can see where a change in the host name could adversely affect the cluster.

 

The only user that can reset / change the host name is 'root'.

 

For example:

 

$ hostname
bp1
$ hostname bp2
You must be superuser to set the hostname

 

If you have multiple system administrators with root access, then you may never know who precisely made the change.

 

Check the root command history file for any occurrences of the hostname command.

 

 

Honored Contributor
Bill Hassell
Posts: 14,210
Registered: ‎05-29-2000
Message 3 of 4 (156 Views)

Re: hostnmae changed

Patrick is correct. Someone has the root password but is not properly trained or lacks experience as a system administrator.  SInce it sounds like this system is important enough to have the expensive Service Guard software, it will need a much higher level of accountability for root user actions. The best way to do this is to remove direct root access for everyone and use sudo for all root commands. This will log all attempts to perform a  root level command as well as the incoming connection.

 

Note also that the errant root user may not have typed the hostname command but may have run sam or smh. Both of these tools have logs that can be searched. You should also check sulog for a possible connection.

Advisor
bingoarunprasat
Posts: 26
Registered: ‎08-21-2013
Message 4 of 4 (131 Views)

Re: hostnmae changed

Hi Ajin,

 

Check your package log file. It exactly shows what caused the package to halt and when it halted.

 

Yes, host name changes cause the package to halt.

 

'cmclnodelist' file and 'node_name' values in package configuration files are the parameters which contains node names.

 

Regards,

Arun

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.