Sun Cluster Geographic Edition System Administration Guide

ProcedureHow to Configure Trust Between Two Clusters

Before You Begin

Ensure that the following conditions are met:

  1. Log in to a cluster node.

    You must be assigned the Geo Management RBAC rights profile to complete this procedure. For more information about RBAC, see Sun Cluster Geographic Edition Software and RBAC.

  2. Import the public keys from the remote cluster to the local cluster.

    Running this command on one node of the local cluster imports the keys from the remote cluster to one node of the cluster.

    # geops add-trust -c remotepartnerclustername
    -c remotepartnerclustername[.domainname]

    Specifies the logical hostname of the cluster with which to form a partnership. The logical hostname is used by the Sun Cluster Geographic Edition software and maps to the name of the remote partner cluster. For example, a remote partner cluster name might resemble the following:


    If the clusters are on different domains, also specify the fully qualified domain name. For example, two clusters in a partnership that have different domains might resemble the following:


    When you use this option with the add-trust or remote-trust subcommand, the option specifies the alias where the public keys on the remote cluster are stored. An alias for certificates on the remote cluster has the following pattern:


    Keys and only keys that belong to the remote cluster should have their alias match this pattern.

    For more information about the geops command, refer to the geops(1M) man page.

  3. Repeat the preceding steps on a node of the remote partner cluster.

    If you choose to use the Sun Cluster Manager, skip this step. The Sun Cluster Manager handles all nodes in a single operation.

  4. Verify trust from one node of each cluster.

    # geops verify-trust -c remotepartnerclustername[.domainname]

    This command verifies the trust from the node on which you run the command to all nodes of the partner cluster. If you choose to use the Sun Cluster Manager, it verifies the trust from all nodes of the local cluster to all nodes of the partner cluster

See Also

For a complete example of how to configure and join a partnership, see Example 5–4.