< Previous  | TOC | Index | Next  >

Installing cluster connector

Cluster connector is a process agent, which you must use if a firewall exists between the management server and any clusters. You can install cluster connector on UNIX-based or Windows-based clusters. You can also use a batch feature to install cluster connector on UNIX-based clusters.

  Note   You must stop all VCS Web consoles, VCS Java consoles, and agent wizards that are running on any cluster nodes before you install cluster connector.

For all cluster connector installations, cluster connector installs or upgrades Symantec Product Authentication Service (version 4.3) on target systems that do not already have it.

For Windows, you must install the authentication broker on the local system (the system from which you run the cluster connector installation). You can install cluster connector from the management server or from any other system that runs the authentication broker. For UNIX, one of the following two conditions must be true:

• You are installing cluster connector (locally or remotely) from a system running the authentication broker.
• You are installing cluster connector (locally or remotely) from a cluster node and that cluster node is in your install list.

  For example, assume that you have nodes A, B, and C each in their own cluster; each have the authentication broker installed. You also have system X with no authentication broker. You cannot install cluster connector from X. You can install cluster connector from A to B and C to other nodes.

Installing the cluster connector on UNIX systems

Perform this procedure to use cluster connector for management server communications when the cluster is a supported VCS cluster. You can also use this procedure if you want to install or configure cluster connector after installing VCS 5.0 on a cluster.

 To install cluster connector on a UNIX system

1. Insert the distribution disc into the drive on the local system. At the command prompt, type the following command to run the installer program:

   ./installer -rsh

   The installer program presents copyright information followed by a menu titled, "Storage Foundation and High Availability Solutions 5.0".

2. Enter i to specify a task.

   Enter a Task: [I,C,L,P,U,D,Q,?] i

   The installer displays another menu that lists products that are available for installation.

3. Enter the menu number that corresponds to Veritas Cluster Management Console.

   Select a product to install:nn

   The installer presents a description of the product.

4. Enter 2 if you are prompted to select a product component.

Enter '1' to install the Management Server, '2' to install the 
Cluster Connector: [1-2,q] (1) 2
 
  The installer presents a message stating that it will install cluster connector. Note that option 1 only appears on Solaris systems.

5. Enter the name of one system in each cluster to be managed. Separate the system names with spaces.

   Storage Foundation and High Availability Solutions 5.0

Enter the name of a system in each cluster that you want the 
management server to manage. Separate system names with spaces:
 
 system1 system2 system3


  The installer detects the systems that you enter, performs an initial check of those systems, and then checks for installed packages on those systems. If these checks are satisfactory, the installer lists the packages to be installed.

6. Enter y to verify that the information up to this point is correct.

   Is this information correct? [y,n,q] (y)

   The installer performs an initial system check of the local system and checks for installed packages on the local system. If these checks are satisfactory, the installer program lists the packages to be installed.

   Storage Foundation and High Availability Solutions 5.0

   installer will install the following CMC packages:

   VRTSat Symantec Product Authentication Service

   VRTSperl Veritas Perl 5.8.8 Redistribution

   VRTSjre15 Veritas Java Runtime Environment Redistribution

VRTScmccc    Veritas Cluster Management Console Cluster 
Connector
 
 Press [Return] to continue:

7. Press Enter.

   You may install Cluster Management Console packages without performing configuration. The installer program gives you the option to configure Cluster Management Console now, and provides instructions for configuring Cluster Management Console later.

8. Enter y to configure Cluster Management Console.

   Are you ready to configure CMC? [y,n,q] (y)

9. Enter the fully-qualified management server network address, such as:

Enter the network address used by the management server [?] 
mgmtserver1.symantec.com
 

10. Enter y to verify that the information up to this point is correct.

    Is this information correct? [y,n,q] (y)

11. Enter a password for the cluster connector service account.

    The password is the password that was entered for the cluster connector service account during management server installation.

    Enter the password for the CMC service account:xxxxx

12. Enter the root hash of the authentication broker installed on the management server, which you can get from the Root Broker administrator.

    Enter the hash of the Management Server's root broker [?]

    • On Windows:

		\program files\veritas\security\authentication\bin\vssat 

		showbrokerhash
 
  


 On UNIX systems:


 		/opt/VRTSat/bin/vssat showbrokerhash


  The output of this command looks similar to the following:

 Root Hash:      9dfde3d9aaebee084f8e35819c1fed7e6b01d2ae


  Enter the alphanumeric string (the string you receive is different from the one shown).

  

13. Enter y to verify that the information up to this point is correct.

    Is this information correct? [y,n,q] (y)

    The installer presents:

    • Installation progress percentages
    • Authentication status messages
    • Cluster connector configuration status messages
14. Enter y to start Veritas Cluster Management Console processes.

Do you want to start Veritas Cluster Management Console 
processes now?
 
 [y,n,q] (y)


  The installer presents startup progress percentages and, if successful, displays the following message:

 Startup completed successfully on all systems

15. Enter an encryption key of at least five characters.

    This key is used to encrypt passwords in the response file. It must be referred to using the -enckeyfile option if the generated installation response file is to be used again.

A string of five or more characters is required to encrypt 
passwords in the responsefile
 
 Enter five or more characters to be used an encryption key:


  xxxxx

 Press [Return] to continue:

16. Press Enter.

    Record the location that the installer program provides for the installation log files, summary file, and response file.

Batch installation of cluster connector on UNIX systems

This process is available for a new installation on supported UNIX clusters and for the upgrade of UNIX clusters running CommandCentral Availability cluster monitor.

 To perform a batch installation of cluster connector on UNIX

1. Insert the distribution disc into the drive on the local system. At the command prompt, type the following command to run the installer program:

   ./installer -rsh

   The installer program presents copyright information followed by a menu titled, "Storage Foundation and High Availability Solutions 5.0".

2. Enter i to specify a task.

   Enter a Task: [I,C,L,P,U,D,Q,?] i

   The installer displays another menu that lists products that are available for installation.

3. Enter the menu number that corresponds to Veritas Cluster Management Console.

   Select a product to install:nn

   The installer presents a description of the product. The installer may also display the prompt:

4. Enter 2 if you are prompted to select a product component.

   The installer presents a message stating that it will install cluster connector.

Enter '1' to install the Management Server, '2' to install the 
Cluster Connector: [1-2,q] (1)
 

5. Enter y to verify that the information up to this point is correct.

   Is this information correct? [y,n,q] (y)

   The installer performs an initial system check of the local system and checks for installed packages on the local system. If these checks are satisfactory, the installer program lists the packages to be installed.

   Storage Foundation and High Availability Solutions 5.0

   installer will install the following CMC packages:

   VRTSat Symantec Product Authentication Service

   VRTSperl Veritas Perl 5.8.8 Redistribution

   VRTSjre15 Veritas Java Runtime Environment Redistribution

VRTScmccc    Veritas Cluster Management Console Cluster 
Connector
 
 Press [Return] to continue:

6. Enter the name of one system in each cluster to be managed. Separate the system names with spaces.

   Storage Foundation and High Availability Solutions 5.0

Enter the name of a system in each cluster that you want the 
management server to manage. Separate system names with spaces:
 
 system1 system2 system3


  The installer detects the systems that you enter, performs an initial check of those systems, and then checks for installed packages on those systems. If these checks are satisfactory, the installer lists the packages to be installed.

 Storage Foundation and High Availability Solutions 5.0            


 The following CMC packages will be installed:


 VRTSat       Symantec Product Authentication Service


 VRTSperl     Veritas Perl 5.8.8 Redistribution


 VRTSjre15    Veritas Java Runtime Environment Redistribution


VRTScmccc    Veritas Cluster Management Console cluster 
connector
 
 Press [Return] to continue:

7. Press Enter.

   You may install Cluster Management Console packages without performing configuration. The installer program gives you the option to configure Cluster Management Console now and provides instructions for configuring Cluster Management Console later.

8. Enter y to configure Cluster Management Console.

   Are you ready to configure CMC? [y,n,q] (y)

9. Enter the fully-qualified management server network address.

Enter the network address used by the management server [?] 
mgmtserver1.symantec.com
 
  The installation program repeats the management server address. 

10. Enter y to verify that the information up to this point is correct.

    Is this information correct? [y,n,q] (y)

11. Enter a password for the cluster connector service account.

    The password is the password that was entered for the cluster connector service account during management server installation.

    Enter the password for the CMC service account:xxxxx

12. Enter the root hash of the authentication broker installed on the management server.

    Enter the hash of the Management Server's root broker [?]

    To retrieve the root hash of the management server authentication broker, run the following command:

    • On Windows:

		\program files\veritas\security\authentication\bin\vssat 

		showbrokerhash
 
  


 On UNIX systems:


 		/opt/VRTSat/bin/vssat showbrokerhash


  The output of this command looks similar to the following:

 Root Hash:      9dfde3d9aaebee084f8e35819c1fed7e6b01d2ae


  Enter the alphanumeric string (the string you receive is different from the one shown).

  

13. Enter y when prompted to verify that the information up to this point is correct.

    Is this information correct? [y,n,q] (y)

    The installer presents:

    • Installation progress percentages
    • Authentication status messages
    • Cluster connector configuration status messages
14. Enter y to start Veritas Cluster Management Console processes now.

Do you want to start Veritas Cluster Management Console 
processes now?
 
 [y,n,q] (y) 


  The installer program presents startup progress percentages and, if successful, displays the following message:

 Startup completed successfully on all systems

15. Enter an encryption key of at least five characters.

    This key is used to encrypt passwords in the response file. It must be referred to using the -enckeyfile option if the generated installation response file is to be used again.

A string of five or more characters is required to encrypt 
passwords in the responsefile
 
 Enter five or more characters to be used an encryption key:


  xxxxx

 Press [Return] to continue:

16. Press Enter.

    Record the location that the installer program provides for the installation log files, summary file, and response file.

Installing cluster connector on Windows platforms

Cluster Management Console can manage VCS clusters that run on Windows. You can manage these clusters using cluster connector or direct connect just like the UNIX clusters.

  Note   When installing cluster connector on 64-bit Windows platforms from a 32-bit system, the default install directory will show up as c:\Program Files. Symantec recommends that you change the 64-bit installation directory to C:\Program Files (x86).

 To install cluster connector on Windows

1. Insert the distribution disc into the DVD drive on the local system.
2. On the distribution disc, locate the locate the \installer directory under \windows\cluster management console directory.
3. Double-click the setup.bat file.

   Depending upon the operating system, you may or may not receive the following warning message:

The publisher could not be verified. Are you sure you want to 
run this software?
 
  If you receive this message, click Run.

4. In the Welcome to the Veritas Cluster Management Console Installation Manager dialog box, read the introduction and then click Next.
5. In the Installation and Configuration Options dialog box, click Add Clusters or clustered systems to a management server, and then click Next.
6. In the Cluster Connector Cluster Selection dialog box, follow the dialog box instructions exactly as specified, and then click Next.

   The installer performs a check for WMI on the specified nodes to ensure that they are ready for cluster connector installation.

7. When prompted, enter user account information for each cluster. If a cluster is secure, you are prompted for a domain name in addition to a user name and password that is valid for the cluster.
8. In the Cluster Connector Directory Selection dialog box, do one of the following:
   • Leave the default directories provided
   • Click a directory and then click Select to specify another directory
   • Click Reset all to specify new directories on each node

     Click Next to accept the directories.

9. In the Management Server Information dialog box, provide the IP address for the management server to which cluster connector is intended to connect.

   You cannot change the port specification, 14145, but it is provided to help you to prevent port conflicts when configuring other software. The other ports used by the Cluster Management Console are 8181 (HTTP), 8443 (HTTPS), and 2994 (DBMS; this port can be shared with other Symantec products)

10. In the Services Account Password dialog box:
    • Enter a password for the user account that cluster connector uses for management server communications
    • Enter the root hash of the authentication broker used by the authentication broker installed on the management server

      The password is the password that was entered for the cluster connector service account during management server installation.

      To retrieve the root hash of the management server authentication broker, run the following command:

    • On Windows:

		\program files\veritas\security\authentication\bin\vssat 

		showbrokerhash
 
  


 On UNIX systems:


 		/opt/VRTSat/bin/vssat showbrokerhash


  The output of this command looks similar to the following:

 Root Hash:      9dfde3d9aaebee084f8e35819c1fed7e6b01d2ae


  Enter or copy the alphanumeric string into the Root Hash text box (the string you receive is different from the one shown).

  

11. In the Summary dialog box, review the information you have specified and, if satisfactory, click Next to accept it and start the installation.

    The Installing Veritas Cluster Management Console dialog box displays a progress bar and a status message window for the installation.

12. When you receive the following message, click Next:

    "Done deleting installation files from node...,"

13. In the Completed the Symantec Veritas Cluster Management Console Installation Manager dialog box, click Finish.

The installer creates log files at C:\Documents and Settings\All Users\Application Data\VERITAS\Cluster Management Console. The file names are Install_GUI_0.log and Install_MSI_0.log. The installer creates Install_GUI_0.log on the system from which you run the cluster connector installation. The installer creates Install_MSI_0.log on the target systems.

Avoiding potential service group faults on secure Windows clusters

During cluster connector installation on secure Windows clusters, the CMC_CC@CMC_SERVICES service account fails to authenticate on the cluster nodes. After installation, the ClusterConnector resource faults on the node where the CMC_CC@CMC_SERVICES account is not authenticated. This result causes the CMC service group to fault. The ClusterConnector.log file contains the error message:

Can not get Cache Credential for CMC_CC

 To avoid potential service group faults on secure Windows clusters

1. At a command prompt, change directory to the following directory:

   Veritas\Security\Authentication\bin

   This may be in

   C:\Program Files or C:\Program Files\Common Files

2. Run the following command to verify if the CMC_CC credential was created:

   vssat showcred | grep CMC_CC

3. Run the following command:

"vssat authenticate --domain vx:CMC_SERVICES --prplname CMC_CC

--password  password_for_CMC_CC_user_created_during_MS_install

--broker MS_IPAddress:2821
 
  Usage for this command is 

vssat authenticate  --domain <type:name> [--prplname <prplname> 
[--password <password>]] [--broker <host:port>]
 

4. Repeat these steps on each node of the cluster.

Accessing Cluster Management Console information

Information about administering clusters in multi-cluster mode is available in the Veritas Cluster Server Centralized Management Guide. The online help includes information about administering clusters in both single-cluster and multi-cluster mode. If you want to access the information about managing a single cluster in printed documentation, you can install the documentation package to the desired system.

The documentation package name for each supported operating system is:

• AIX—VRTSvcs.doc
• HP-UX—VRTSvcsdc

  Note that you can copy the documents from depot/VRTSvcsdc/ VRTSvcsdc/opt/ VRTS/docs.

• Linux—VRTSvcsdc
• Solaris—VRTSvcsdc