Recent Posts
 
*
Welcome, Guest. Please login or register. July 30, 2010, 12:44:38 PM


Login with username, password and session length


Pages: 1 2 [3] 4 5 ... 10
 21 
 on: June 21, 2010, 12:25:43 PM 
Started by fbergenh - Last post by fbn2010
By the way: old firmware was EL320_083, new one is EL350_049

 22 
 on: June 21, 2010, 12:24:11 PM 
Started by aix_tiger - Last post by Michael
If you restore from a nim server with an LPP_source assigned any missing devices will be installed.
1. I highly recommend you make a mksysb of the system as it is, and set that somewhere safe.
2. Using alt_disk_install, e.g., do an update_all within the TL level you are running, or update to the latest TL. Updating a TL should ensure that all device drivers (also the currently unused virtual drives) are installed. If something is missed though, nim procedure will install what is missing.
3. Boot to new image, do some basic tests to be sure it is working as expected, and make an mksysb. This is the image you will clone.

4. When you restore from the nim server do not restore old devices - as all you old ethernet and i/o adapters will not be there. Depending on your network settings in the old situation you may have some additional work getting all the interfaces as expected.
5. If the disks are coming from a LUN now (but direct rather than as NPIV or VSCSI) they should work as expected. However, any tuning you may have done to the adapters or hdisks (number of commands, no_reserve, queue_depth, etc) will need to be changed again. Note: some of these changes will be on the VIOS (physical adapter settings) and some in the client.

It is fairly straightforward, but the first time will seem like a lot of activity. You may want to test it just to have a practice run first.
p.s. You can skip the update_all first, but as you are getting some planned downtime to do this it is an excellent time to get an update done as well!

 23 
 on: June 21, 2010, 10:54:19 AM 
Started by fbergenh - Last post by fbn2010
Michael,

Last week we logged a call with IBM for this problem and it turned out to be a firmware problem.

Yesterday we did a firmware update and now everything is fine again.

(I am posting this with a new fbn2010 account, I changed my emailadres on my old account and didn't get any confirmation email)

 24 
 on: June 21, 2010, 10:53:45 AM 
Started by aix_tiger - Last post by aix_tiger
Guys

I do have a scenerio where we have to clone one existing P570 ( POWER5) with dedicated Lpars ( no VIO)to an about to purchase P520 ( POWER 6 ) with virtulaized Lpars.

we have decided to go for mksysb restoration technique , but do have following questions:

1, Are there any be issue expected while restoring mksysb of a POWER 5 server to POWER 6 server ( AIX 5.3 will be the OS for both source/target servers)

2. Will there any be issue expected while restoring mksysb of a dedicated resources Lpar to a virtualized resources Lpar. offcourse we will be setting VIO with new p520 separately?

Any real experiences to share?

Thanks & Regards


 25 
 on: June 17, 2010, 10:11:13 AM 
Started by OdO - Last post by OdO
Hi Michael,

The problem is solved. I used userattrmappath:/etc/security/ldap/2307user.map in ldap.cfg and the user attribute name mapping table not match with LDAP server user attribut.

speed workaround:
I modified /etc/security/ldap/2307user.map
pgrp             SEC_CHAR        gid                        s
groups          SEC_LIST        grouplist                 m

I modified   /etc/security/ldap/2307group.map
keyobjectclass  SEC_CHAR        aixaccessgroup  s
groupname       SEC_CHAR        groupname       m
id                   SEC_INT           groupname       s
users              SEC_LIST          member           m

I'll try to use 2307aixgroup.map and 2307aixuser.map with some modification.

Thank's and sorry for this question.  Roll Eyes

 26 
 on: June 13, 2010, 04:30:24 PM 
Started by Raff - Last post by Michael
I'll be speaking with someone later this week who is doing this "regularly".

 27 
 on: June 13, 2010, 04:28:45 PM 
Started by OdO - Last post by Michael
Hi. It has been a long while since I have worked with LDAP on AIX, but I just want to verify whether you removed the LDAP client and then reran the mksecldap command with the new scheme as argument. Otherwise I suspect the default scheme being used is still the AIX scheme.

I'll try and get an answer for someone I know who is more familiar with LDAP ins and outs. But purely from an installation point of view I would want to verify the exact steps and commands you used to get to the current state.



 28 
 on: June 10, 2010, 11:46:32 PM 
Started by OdO - Last post by OdO
Hello World,

I install Linux Debian 5.04 and slapd package (LDAP server) and running fine. all user can login on linux.
On AIX 5300-11-02, i install  ldap client fileset from AIX DVD, I can not see the pgrp and groups from user002 with lsuser command and login failed, i use AIXaccessGroup objectclass.
However with user1, i use posixgroup objectclass and that work's fine.
I add rfc2307aix and aixaccessgroup to /etc/security/ldap/ldap.cfg ... nothing.

Below my little TEST.ldif added to LDAP server and AIX lsuser commands result.
user001 and tech group : OK
user002 and grp1 + grp2 groups : BAD

TEST.ldif
------------------------------------
dn: ou=people,dc=domain,dc=local
objectClass: top
objectClass: organizationalUnit
ou: people

dn: ou=group,dc=domain,dc=local
objectClass: top
objectClass: organizationalUnit
ou: group

dn: cn=tech,ou=group,dc=domain,dc=local
objectClass: posixGroup
objectClass: top
cn: tech
gidNumber: 10000

dn: GroupName=grp1,ou=group,dc=domain,dc=local
objectClass: AIXaccessGroup
objectClass: top
member: uid=user002,ou=people,dc=domain,dc=local
gid: 5001
GroupName: grp1

dn: GroupName=grp2,ou=group,dc=domain,dc=local
objectClass: AIXaccessGroup
objectClass: top
member: uid=user002,ou=people,dc=domain,dc=local
gid: 5002
GroupName: grp2

dn: uid=user002,ou=people,dc=domain,dc=local
objectClass: posixAccount
objectClass: shadowAccount
objectClass: top
objectClass: AIXAccount
objectClass: account
objectClass: eAccount
uid: user002
cn: U2
gidNumber: 5002
uidNumber: 11002
loginShell: /bin/ksh
userPassword:: passw0rd
gid: 5002
groupList: grp1
groupList: grp2
loginAppli: user002
passwordChar: {MD5} PassOrd
userName: USERNAME
homeDirectory: /home/user002
gecos: ,,,


dn: uid=user001,ou=people,dc=domain,dc=local
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
objectClass: organizationalPerson
objectClass: inetLocalMailRecipient
uid: user001
cn: USER1
sn: user1
title: tech1
userPassword: {MD5}=pAssw0rd=
loginShell: /bin/bash
uidNumber: 11001
gidNumber: 10000
homeDirectory: /home/user001
gecos: ,,,
------------------------------------


AIX  # ls-secldapclntd
ldapservers=linux01.domain.local
ldapport=389
active connections=1
ldapversion=3
userbasedn=ou=people,dc=domain,dc=local
groupbasedn=ou=group,dc=domain,dc=local
idbasedn=
usercachesize=1000
usercacheused=2
groupcachesize=100
groupcacheused=1
usercachetimeout=300
groupcachetimeout=300
heartbeatT=300
numberofthread=10
connectionsperserver=10
alwaysmaster=no
authtype=LDAP_AUTH
searchmode=ALL
defaultentrylocation=LDAP
ldaptimeout=60
serverschematype=RFC2307AIX
userobjectclass=posixaccount,account,shadowaccount,aixaccount
groupobjectclass=posixgroup,aixaccessgroup


AIX  # lsuser -R LDAP user002
user002 id=11002 pgrp= groups= home=/home/user002 shell=/bin/ksh gecos=,,, login=true su=true rlogin=true daemon=true admin=false sugroups=ALL admgroups= tpath=nosak ttys=ALL expires=0 auth1=SYSTEM auth2=NONE umask=22 registry=LDAP SYSTEM=LDAP or files logintimes= loginretries=0 pwdwarntime=0 account_locked=false minage=0 maxage=0 maxexpired=-1 minalpha=0 minother=0 mindiff=0 maxrepeats=8 minlen=0 histexpire=0 histsize=0 pwdchecks= dictionlist= fsize=2097151 cpu=-1 data=262144 stack=65536 core=2097151 rss=65536 nofiles=2000 roles=

AIX # lsuser -R LDAP user001
user001 id=11001 pgrp=tech groups=tech home=/home/user001 shell=/bin/bash gecos=,,, login=true su=true rlogin=true daemon=true admin=false sugroups=ALL admgroups= tpath=nosak ttys=ALL expires=0 auth1=SYSTEM auth2=NONE umask=22 registry=LDAP SYSTEM=LDAP or files logintimes= loginretries=0 pwdwarntime=0 account_locked=false minage=0 maxage=0 maxexpired=-1 minalpha=0 minother=0 mindiff=0 maxrepeats=8 minlen=0 histexpire=0 histsize=0 pwdchecks= dictionlist= fsize=2097151 cpu=-1 data=262144 stack=65536 core=2097151 rss=65536 nofiles=2000 time_last_login=1267835862 time_last_unsuccessful_login=1264554036 tty_last_login=/dev/pts/1 tty_last_unsuccessful_login=/dev/pts/0 host_last_login= host_last_unsuccessful_login= unsuccessful_login_count=0 roles=


Regards,

OdO

 29 
 on: June 10, 2010, 02:29:35 AM 
Started by Raff - Last post by Raff

 Thanks Michael, I have read the redbooks, basically we need to define sites first with the nodes in the list and then create a cluster, we will then add sites into the cluster, a bit complex but not hard  Smiley

 if someone has any PowerHA failover scripts then that would be help, I can use them as a template, basically due to apps workload we need to create failover script so for instance if 2 or more than 2 nodes are down in the 6 nodes cluster then failover to the other site instead of 3rd node in the same cluster etc.

 30 
 on: June 09, 2010, 08:03:28 PM 
Started by Raff - Last post by Michael
The new name is something like PowerHA SystemMirror (version 6.1 and beyond for now). I am not as active with HACMP/PowerHA as I once was.

Basically, it should be fairly simple with XD, i.e. all in smit screens - as XD knows how to talk with storage systems. If I recall correctly XD negotiates the visibility of the disks. On the side/site that is active - the disks are visible, on the inactive side they are invisible, or otherwise inaccessable. On a node failure, or directed move of a resource group XD/SystemMirror cause the visibility status to change.

Maybe visibility is the wrong term - but the "smarts" of CD is that it negotiates with the storage system where the LUNs are visible/active.

And today I just heard that there are two or three new courses from IBM training for HACMP/PowerHA/SystemMirror. The course codes are AN41-AN46 (some of these course are already a year old, others are less than a few weeks.)

When I have time I'll look a bit deeper - so maybe someone who has more recent experience will give an answer before that.

Pages: 1 2 [3] 4 5 ... 10
Powered by MySQL Powered by PHP Powered by SMF 1.1.10 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM
Page created in 0.731 seconds with 15 queries.



eXTReMe Tracker

Terms of Use and Privacy and Security Policies
Copyright 2001-2010 Michael Felt, John R Peck and ROOTVG.NET