NAME | SYNOPSIS | DESCRIPTION | SUBCOMMANDS | OPTIONS | OPERANDS | EXTENDED DESCRIPTION | EXIT STATUS | EXAMPLES | ATTRIBUTES | SEE ALSO
The geops command enables you to create, configure, and manage the partnerships that are defined between clusters. A partnership is a pair of clusters that define a cluster infrastructure on which an application might be protected against disaster.
Two clusters must be configured to trust each other before you create a partnership between two clusters.
A partnership requires a running heartbeat between clusters. Partner clusters monitor each other with heartbeats.
The Sun Cluster Geographic Edition software notifies all remote partners of changes in the partnership configuration.
Run the geops command on a cluster that has been enabled for partnership.
To run the geops command to create, configure, and manage the partnerships, you must be assigned the proper role-based access control (RBAC) rights profile.
If you have root access, you have permissions to perform any operation. If you do not have root access, the following RBAC rights apply:
Basic Solaris User. You can read information about Sun Cluster Geographic Edition entities by running commands such as geopg list, geohb list, and geops list.
Geo Management. You can perform all the read operations that someone with Basic Solaris User access can perform. You can also perform administrative and configuration tasks such as geohb create, geopg switchover, geoadm start, and geoadm stop.
You must have root access to run the following subcommands:
geops add-trust
geops remove-trust
geops verify-trust
For more information, see the rbac(5) man page and “Sun Cluster Geographic Edition Software and RBAC” in Sun Cluster Geographic Edition System Administration Guide.
The general form of this command is as follows:
geops [subcommand] [options] [operands]
You can omit subcommand only if options specifies the option -?, -o, -V, or -v.
Each option of this command has a long form and a short form. Both forms of each option are given with the description of the option in the OPTIONS section of this man page.
The following subcommands are supported:
Retrieve public keys of a remote cluster and add the keys to the truststore file on every node of the local cluster. The truststore file is at /etc/cacao/instances/default/security/jsse/truststore.
The new key is not added to the trustore file if an entry with the same alias already exists in the truststore file on a node. If the existing entry contains a key that is different from the new key, you must delete the entry from the truststore file before you add the new key.
Create a partnership between the local cluster and a remote cluster. The two cluster must be configured to trust each other.
Enable the local cluster to join an existing partnership.
Running the geops join-partnership command on a cluster that is already a member of a partnership causes the partnership configuration from the remote cluster to overwrite the partnership configuration of the local cluster.
If the remote partner cluster is down, modifications to the local cluster might not be propagated to the remote partner cluster.
Remove the local cluster from a partnership. This subcommand deletes the partnership when the last participating cluster in the partnership leaves.
Display partnership configuration information.
Remove all keys for the remote cluster from the truststore file on the local node. You must remove all keys for the remote cluster from the local host before you can add a new key.
To remove a key from a cluster, run the remove-trust subcommand from each node of the cluster.
Modify the properties of a partnership. This subcommand updates the local cluster configuration and notifies remote partner clusters of the configuration change.
Synchronize information with the partner cluster. This subcommand cannot update a partnership while the cluster is disconnected from the partner cluster.
Retrieve node information on the remote cluster and establish a secure Java Management Extensions (JMX) connection from local host to every node of the remote cluster. The verify-trust subcommand verifies that the certificates have been exchanged properly between the remote and the local clusters.
If you do not specify a remote cluster, the verify-trust subcommand verifies the connections between the local host to other nodes of the local cluster.
The following options are supported:
Displays help information. When this option is used, no other processing is performed.
You can specify this option without a subcommand or with a subcommand.
If you specify this option without a subcommand, the list of subcommands for this command is displayed.
If you specify this option with a subcommand, the usage options for the subcommand are displayed.
The question mark might be interpreted as a special character by some shells. Use quotes (-"?") or an escape character to avoid pattern matching.
Specifies the logical hostname of the cluster with which to form a partnership. The logical hostname is used by the Sun Cluster Geographic Edition software and maps to the name of the remote partner cluster. For example, a remote partner cluster name might resemble the following:
cluster-paris
When you use this option with the add-trust, remote-trust, or verify-trust subcommand, the option specifies the alias where the public keys on the remote cluster are stored. An alias for certificates on the remote cluster have the following pattern:
remotepartnercluster.certificate[0-9]*
Keys and only keys belong to the remote cluster should have their alias match this pattern.
Specifies an identifier for the heartbeat on a partner cluster that the local cluster can use to monitor partner availability. You must create the heartbeat by running the geohb command before you specify the heartbeat in the geops command.
If this option is omitted, the Sun Cluster Geographic Edition software uses the default heartbeat mechanism between member clusters.
Specifies the value of partnership properties. You can specify multiple properties at one time by using multiple statements.
Running the geops join-partnership command on a cluster that is already a member of a partnership causes the partnership configuration from the partner cluster to overwrite the partnership configuration of the local cluster.
See the EXTENDED DESCRIPTION section for a description of the properties.
Displays the version of the command.
Do not specify this option with subcommands, operands, or other options. The subcommands, operands, or other options are ignored. The -V option only displays the version of the command. No other operations are performed.
The following section lists the partnership properties. These properties are set at creation and tunable at runtime.
Describes the partnership.
Optional property.
Type: String.
Default value: Empty string.
Specifies the path to the script or command that is triggered when a heartbeat-loss notification is issued.
Optional property.
Type: String.
Default value: Empty string.
The Sun Cluster Geographic Edition software enables you to specify a command to run when a heartbeat-loss notification is issued. You can specify the path to the command by using the Notification_ActionCmd property. The command runs with root permissions, so the file must have root ownership and execution permissions. If both Notification_ActionCmd and Notification_EmailAddrs properties have been configured, an email is sent after the command that is specified in the Notification_ActionCmd property is run.
A heartbeat loss only indicates a lost connection to a remote cluster and not the cause for the lost connection. A remote cluster that has lost a heartbeat connection might still be functioning even though the heartbeat monitoring has lost its connection.
Therefore, you must exercise caution in the script you specify for the Notification_actioncmd parameter. For example, if you specify a forced takeover or a switchover in the Notification_actioncmd script, a takeover or a switchover might be run even though one might not be necessary.
Specifies the email address to send messages to when a heartbeat-loss notification is issued. You can specify multiple email addresses by separating each email address with a comma.
Optional property.
Type: String array.
Default value: Empty string.
The Notification_EmailAddrs and the Notification_ActionCmd properties enable notification on heartbeat-loss events. Heartbeat-loss events are detected locally on each cluster of the partnership, and the notification is triggered locally on the cluster where the event is detected. The email addresses and the notification action path should be valid on each cluster in the partnership.
The following exit values are returned:
The command completed successfully.
An error has occurred.
The following geops commands add trust between clusters, cluster-paris and cluster-newyork.
Add cluster cluster-newyork to the trust on the cluster cluster-paris.
cluster-paris# /usr/cluster/bin/geops add-trust cluster-newyork |
Keys are stored on every node of cluster cluster-paris with alias cluster-newyork.certificatenumber.
Add cluster cluster-paris to the trust on the cluster cluster-newyork.
cluster-newyork# /usr/cluster/bin/geops add-trust cluster-paris |
Verify trust between the two clusters.
cluster-paris# /usr/cluster/bin/geops verify-trust cluster-newyork |
cluster-newyork# /usr/cluster/bin/geops verify-trust cluster-paris |
The following geops command creates the partnership paris-newyork-ps, on the cluster cluster-paris.
# geops create -c cluster-newyork -p Description=Transatlantic \ -p Notification_emailaddrs=sysadmin@companyX.com paris-newyork-ps |
The following geops command modifies the notification email address for cluster-paris.
# geops join-partnership cluster-paris paris-newyork-ps |
The following geops command modifies the notification email address for cluster-paris.
# geops set-prop -p Notification_emailaddrs=operations@companyX.com \ paris-newyork-ps |
The following geops command removes the cluster cluster-paris from the partnership paris-newyork-ps.
# geohb remove-plugin command1 paris-to-newyork |
The following geops command deletes the plug-in that is named command1, from the heartbeat that is named paris-to-newyork.
# geops leave-partnership paris-newyork-ps |
The following geops command resynchronizes the partnership paris-newyork-ps.
# geops update paris-newyork-ps |
See attributes(5) for descriptions of the following attributes.
ATTRIBUTE TYPE |
ATTRIBUTE VALUE |
---|---|
Architecture |
SPARC |
Availability |
SUNWscgctl |
Interface Stability |
Evolving |
NAME | SYNOPSIS | DESCRIPTION | SUBCOMMANDS | OPTIONS | OPERANDS | EXTENDED DESCRIPTION | EXIT STATUS | EXAMPLES | ATTRIBUTES | SEE ALSO