Virtual Business Service-Availability User's Guide
- Overview of Virtual Business Services
- Virtualization support in Virtual Business Services
- Supported operating systems for Virtual Business Services
- Installing and configuring Virtual Business Services
- Configuring a virtual business service
- Creating virtual business services
- Editing virtual business services
- Configuring dependencies for a virtual business service
- Managing Microsoft Failover Clustering from VBS
- Virtual Business Services operations
- Starting and stopping Virtual Business Services
- Tracking VBS operations
- Logs of a virtual business service
- Virtual Business Services security
- Fault management in Virtual Business Services
- Disaster recovery in Virtual Business Services
- Upgrading Virtual Business Services
- Appendix A. Command reference
- Appendix B. Troubleshooting and recovery
- Appendix C. Known issues and limitations
- Known issues and limitations
- Known issues and limitations
Security mechanism for cluster C1
When the VBS daemon on C1 is started, it reads the contents of the configuration file on the host to determine the clusters that are allowed to communicate with C1. In this case, VBS A consists of C1 and C2. The VBS daemon determines that C2 can communicate with C1. Hence, it adds the cluster IDs of C1 and C2 to the access control file, $VBS_HOME/web/admin/.xprtlaccess
.
# cat /opt/VRTSvbs/web/admin/.xprtlaccess
<ClusterId of C1>@vbs_domain@<Name of VOM CMS>.vx:user
<ClusterId of C2>@vbs_domain@<Name of VOM CMS>.vx:user
If cluster C3 tries to communicate with C1, the VBS daemon on C1 looks up the access control file and disallows C3 from communicating with C1. Also, no external hosts or clusters can pretend to be one of C1 or C2 because they do not have the credential.
Assume that there is a reconfiguration of VBS A such that a service group which belongs to an outside cluster is now part of VBS A. The new configuration is deployed to cluster C1 and the VBS daemon updates the access control file to include the cluster ID of the outside cluster.