JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Solaris Cluster Geographic Edition Installation Guide     Oracle Solaris Cluster 4.0
search filter icon
search icon

Document Information

Preface

1.  Planning the Geographic Edition Installation

2.  Installing Geographic Edition Software

3.  Enabling and Configuring the Geographic Edition Software

Preparing a Zone Cluster for Partner Membership

How to Prepare a Zone Cluster for Partner Membership

Enabling the Geographic Edition Infrastructure

How to Enable Geographic Edition Software

Configuring Trust Between Partner Clusters

How to Configure Trust Between Two Clusters

4.  Upgrading the Geographic Edition Software

5.  Uninstalling Geographic Edition 4.0 Software

Index

Configuring Trust Between Partner Clusters

Before you create a partnership between two clusters, you must configure Geographic Edition software for secure communication between the two clusters. The configuration must be reciprocal. For example, you must configure the cluster cluster-paris to trust the cluster cluster-newyork, and you must also configure the cluster cluster-newyork to trust the cluster cluster-paris.

How to Configure Trust Between Two Clusters

Before You Begin

Ensure that the following conditions are met:

  1. Become superuser on a cluster node.
  2. Import the public keys from the remote cluster to the local cluster.

    Run the following command on one node of the local cluster to import the keys from the remote cluster to one node of the cluster.

    # geops add-trust -c remotecluster
    -c remotecluster

    Specifies the logical hostname of the cluster with which to form a partnership. The logical hostname is used by Geographic Edition software and maps to the name of the remote partner cluster. For example, a remote partner cluster name might resemble the following:

    cluster-paris

    When you use this option with the add-trust or remove-trust subcommand, the option specifies the alias where the public keys on the remote cluster are stored. An alias for certificates on the remote cluster has the following pattern:

    remotecluster.certificate[0-9]*

    Keys and only keys that belong to the remote cluster should have their alias match this pattern.

    For more information about the geops command, refer to the geops(1M) man page.

  3. Repeat the preceding steps on a node of the remote partner cluster.
  4. Verify trust from one node of each cluster.
    # geops verify-trust -c remotecluster

Next Steps

Configure and join the partnership. See Chapter 5, Administering Cluster Partnerships, in Oracle Solaris Cluster Geographic Edition System Administration Guide.

See Also

To remove a partnership between two clusters, see How to Remove Trust Between Two Clusters in Oracle Solaris Cluster Geographic Edition System Administration Guide.