Sun Cluster 3.1 9/04 Release Notes for Solaris OS

scinstall –u update Does Not Preserve SUNWcacao Security Keys (5068616)

Problem Summary: During upgrade to Sun Cluster 3.1 9/04 software, the scinstall command installs the new common agent container packages, SUNWcacao and SUNWcacaocfg, but does not distribute identical security keys to all cluster nodes.

Workaround: Perform the following steps to ensure that the common agent container security files are identical on all cluster nodes and that the copied files retain the correct file permissions. These files are required by Sun Cluster software.

  1. On one cluster node, change to the /etc/opt/SUNWcacao/ directory.


    phys-schost-1# cd /etc/opt/SUNWcacao/
    
  2. Create a tar file of the /etc/opt/SUNWcacao/security/ directory.


    phys-schost-1# tar cf /tmp/SECURITY.tar security
    
  3. Copy the /tmp/SECURITY.tar file to each of the other cluster nodes.

  4. On each node to which you copied the /tmp/SECURITY.tar file, extract the security files.

    Any security files that already exist in the /etc/opt/SUNWcacao/ directory are overwritten.


    phys-schost-2# cd /etc/opt/SUNWcacao/
    phys-schost-2# tar xf /tmp/SECURITY.tar
    
  5. Delete the /tmp/SECURITY.tar file from each node in the cluster.

    You must delete each copy of the tar file to avoid security risks.


    phys-schost-1# rm /tmp/SECURITY.tar
    phys-schost-2# rm /tmp/SECURITY.tar
    
  6. On each node, restart the security file agent.


    # /opt/SUNWcacao/bin/cacaoadm start