IBM RS/6000 SP, Problem Determination Manual

Page: 104 / 316

This soft copy for use by IBM employees only.
3.8.5 TCP/IP
Check that TCP/IP is functioning correctly by using the
ping
command to confirm
communication with the various adapters on each node. Also use the host
< h o s t n a m e > a n d h o s t < I P a d d r e s s > c o m m a n d s t o e n s u r e t h a t h o s t n a m e
resolution is correct (both commands must return the same output).
root@sp21cw0 /tmp > host sp21cw0
sp21cw0 is 9.12.60.99,
Aliases: sp21en0
root@sp21cw0 /tmp > host 9.12.60.99
sp21cw0 is 9.12.60.99,
Aliases: sp21en0
Figure 38. Example of Host Name Resolution
3.8.6 Remote Principals
Ensure that the remote user or client has permission to invoke commands on the
local user account. If the originating remote user is authenticated to one of the
principals named in the .klogin file, access is granted to that account.
Note: If a klogin file is present, the owner must also be listed in order to gain
access to the user
′
s own account from a remote host.
3.8.7 Service Key Files
First check that the service key files (/etc/krb-srvtab) exist on all nodes. Use
either the
ksrvutil
or the
klist
command to show the version numbers of the
service keys in the /etc/krb-srvtab files.
root@sp21cw0 /etc > klist -srvtab
Server key file:
/etc/krb-srvtab
Service Instance Realm Key Version
------------------------------------------------------
hardmon sp21cw0 SP21CW0 1
rcmd
sp21cw0 SP21CW0 1
rcmd sp21tr0 SP21CW0 1
hardmon sp21tr0 SP21CW0 1
Figure 39. Example of klist -srvtab Command o n the Control Workstation
The service key version numbers in the /etc/krb-srvtab files must match the
version number kept in the Kerberos authentication database. Use the
/usr/lpp/ssp/kerberos/etc/kdb_util
command to dump the contents of the
authentication database to an ASCII file. The fifth field in this file is the service
key version number.
If there are any problems with the service key files, then they must be re-created
using the
/usr/lpp/ssp/kerberos/etc/ext_srvtab
command. See Chapter 6,
“Diagnosing Authentication Problems,” in the RS/6000 Scalable POWERparallel
Systems: Diagnosis and Messages Guide, GC23-3899 for further information.
84
SP PD Guide