InfoScale™ 9.0 Storage Foundation Cluster File System High Availability Configuration and Upgrade Guide - AIX

To configure the authentication broker on node sys5

1. Extract the embedded authentication files and copy them to temporary directory:

   # mkdir -p /var/VRTSvcs/vcsauth/bkup

   # cd /tmp; gunzip -c /opt/VRTSvcs/bin/VxAT.tar.gz | tar xvf -

2. Edit the setup file manually:

   # cat /etc/vx/.uuids/clusuuid 2>&1

   The output is a string denoting the UUID. This UUID (without { and }) is used as the ClusterName for the setup file.

   {UUID}

   # cat /tmp/eat_setup 2>&1

   The file content must resemble the following example:

   AcceptorMode=IP_ONLY

   BrokerExeName=vcsauthserver

   ClusterName=UUID

   DataDir=/var/VRTSvcs/vcsauth/data/VCSAUTHSERVER

   DestDir=/opt/VRTSvcs/bin/vcsauth/vcsauthserver

   FipsMode=0

   IPPort=14149

   RootBrokerName=vcsroot_uuid

   SetToRBPlusABorNot=0

   SetupPDRs=1

   SourceDir=/tmp/VxAT/version

3. Set up the embedded authentication file:

   # cd /tmp/VxAT/version/bin/edition_number; \
   ./broker_setup.sh/tmp/eat_setup

   # /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vssregctl -s -f 
   /var/VRTSvcs/vcsauth/data/VCSAUTHSERVER/root/.VRTSat/profile \
   /VRTSatlocal.conf -b 'Security\Authentication \
   \Authentication Broker' -k UpdatedDebugLogFileName \
   -v /var/VRTSvcs/log/vcsauthserver.log -t string

4. Copy the broker credentials from one node in the cluster to sys5 by copying the entire bkup directory.

   The bkup directory content resembles the following example:

   # cd /var/VRTSvcs/vcsauth/bkup/

   # ls

   CMDSERVER  HAD  VCS_SERVICES  WAC

5. Import the VCS_SERVICES domain.

   # /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/atutil import -z \
   /var/VRTSvcs/vcsauth/data/VCSAUTHSERVER -f /var/VRTSvcs/vcsauth/bkup \
   /VCS_SERVICES -p password

6. Import the credentials for HAD, CMDSERVER, and WAC.

   # /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/atutil import -z \
   /var/VRTSvcs/vcsauth/data/VCS_SERVICES -f /var/VRTSvcs/vcsauth/bkup \
   /HAD -p password

7. Start the vcsauthserver process on sys5.

   # /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vcsauthserver.sh

8. Perform the following tasks:

   # mkdir /var/VRTSvcs/vcsauth/data/CLIENT

   # mkdir /var/VRTSvcs/vcsauth/data/TRUST

   # export EAT_DATA_DIR='/var/VRTSvcs/vcsauth/data/TRUST'

   # /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vssat setuptrust -b \
   localhost:14149 -s high

9. Create the /etc/VRTSvcs/conf/config/.secure file:

   # touch /etc/VRTSvcs/conf/config/.secure