Storage Foundation for Oracle® RAC 7.3.1 Administrator's Guide - Linux
- Section I. SF Oracle RAC concepts and administration
- Overview of Storage Foundation for Oracle RAC
- About Storage Foundation for Oracle RAC
- Component products and processes of SF Oracle RAC
- About Virtual Business Services
- Administering SF Oracle RAC and its components
- Administering SF Oracle RAC
- Starting or stopping SF Oracle RAC on each node
- Administering VCS
- Administering I/O fencing
- About the vxfentsthdw utility
- Testing the coordinator disk group using the -c option of vxfentsthdw
- About the vxfenadm utility
- About the vxfenclearpre utility
- About the vxfenswap utility
- Administering the CP server
- Administering CFS
- Administering CVM
- Changing the CVM master manually
- Administering Flexible Storage Sharing
- Backing up and restoring disk group configuration data
- Administering SF Oracle RAC global clusters
- Administering SF Oracle RAC
- Overview of Storage Foundation for Oracle RAC
- Section II. Performance and troubleshooting
- Troubleshooting SF Oracle RAC
- About troubleshooting SF Oracle RAC
- Troubleshooting I/O fencing
- Fencing startup reports preexisting split-brain
- Troubleshooting CP server
- Troubleshooting server-based fencing on the SF Oracle RAC cluster nodes
- Issues during online migration of coordination points
- Troubleshooting Cluster Volume Manager in SF Oracle RAC clusters
- Troubleshooting CFS
- Troubleshooting interconnects
- Troubleshooting Oracle
- Troubleshooting ODM in SF Oracle RAC clusters
- Prevention and recovery strategies
- Tunable parameters
- Troubleshooting SF Oracle RAC
- Section III. Reference
Migrating from non-secure to secure setup for CP server and SF Oracle RAC cluster communication
The following procedure describes how to migrate from a non-secure to secure set up for the coordination point server (CP server) and SF Oracle RAC cluster. The procedure is only applicable to Veritas Product Authentication Services (AT)-based communication between CP servers and SF Oracle RAC cluster.
To migrate from non-secure to secure setup for CP server and SF Oracle RAC cluster
- Stop VCS on all cluster nodes that use the CP servers.
# hastop -all
- Stop fencing on all the SF Oracle RAC cluster nodes of all the clusters.
For RHEL 7, SLES 12, and supported RHEL distributions:
# systemctl stop vxfen
For earlier versions of RHEL, SLES, and supported RHEL distributions:
# /etc/init.d/vxfen stop
- Stop all the CP servers using the following command on each CP server:
# hagrp -offline CPSSG -any
- Ensure that security is configured for communication on CP Servers as well as all the clients.
See the Cluster Server Configuration and Upgrade Guide for more information.
If CP server is hosted on an SFHA cluster, perform this step on each CP server.
Bring the mount resource in the CPSSG service group online.
# hares -online cpsmount -sys local_system_name
Complete the remaining steps.
If CP server is hosted on a single-node VCS cluster, skip to step 8 and complete the remaining steps.
- After the mount resource comes online, move the
credentials
directory from the default location to shared storage.# mv /var/VRTSvcs/vcsauth/data/CPSERVER /etc/VRTSvcs/db/
- Create softlinks on all the nodes of the CP servers.
# ln -s /etc/VRTScps/db/CPSERVER \ /var/VRTSvcs/vcsauth/data/CPSERVER
- Edit
/etc/vxcps.conf
on each CP server to set security=1. - Start CP servers by using the following command:
# hagrp -online CPSSG -any
- Edit
/etc/VRTSvcs/conf/config/main.cf
on the first node of the cluster and remove the UseFence=SCSI3 attribute.Start VCS on the first node and then on all other nodes of the cluster.
- Reconfigure fencing on each cluster by using the installer.
# /opt/VRTS/install/installer -fencing