For more information about RBAC, see Securing Geographic Edition Software in Oracle Solaris Cluster Geographic Edition Installation and Configuration Guide.
# chmod A+user:username:rwx:allow /var/cluster/geo
The /var/cluster/geo directory must have the correct access control lists (ACL) applied for compatibility between the Geo Management RBAC rights profile and Oracle ZFS Storage Appliance software.
The protection group configuration output of geopg show will display which file is associated with the protection group.
For more information about configuration files, see configuration_file Property in Oracle Solaris Cluster Geographic Edition System Administration Guide.
For the parameters that you do not want to modify, specify the same values that exist in the replication component.
Otherwise, make a copy of the /opt/ORCLscgrepzfssa/etc/zfssa_geo_config replication configuration file to a different location, such as /var/tmp/geo/zfssa/zfssa_geo_config.
# cp /opt/ORCLscgrepzfssa/etc/zfssa_geo_config /var/tmp/geo/zfssa/
Fill in the existing values for unchanged parameters and new values for the parameters that require to be modified.
For example, if you want to modify the user for connecting to the local and remote Oracle ZFS Storage Appliances for an existing replication component trancos in a protection group zfssa-pg configured in partnership zfssa-partnership. If the replication configuration file to use for trancos is /var/tmp/geo/zfssa/zfssa_geo_config, then set these new values in that file, keeping all other parameters unchanged.
PS=zfssa-partnership PG=zfssa-pg REPCOMP=trancos REPRS=zfssa-replication-resource REPRG=zfssa-replication-resource-group DESC="ZFS Storage Appliance replication protection group" APPRG=usa-rg CONFIGFILE=/etc/opt/SUNWscgrepsbp/configuration LOCAL_CONNECT_STRING=newuser@local-appliance.example.com REMOTE_CONNECT_STRING=newuser@remote-appliance.example.com CLUSTER_DGS= MODIFY_PASSPHRASE=
Use the zfs_snap_geo_register script with the modified configuration file.
# /opt/ORCLscgrepzfssa/util/zfssa_geo_register -f /var/tmp/geo/zfssa/zfssa_geo_config
The command modifies the replication component in a protection group on the local cluster. If the partner cluster contains a protection group with the same name, the command also propagates the new configuration to the partner cluster.
You can perform this procedure from either cluster. However, if you are using a saved configuration file that was used to create replication component from the primary cluster, perform this procedure on the primary cluster since the values in the file will be appropriate from the primary cluster.
For example, you can type the following command on one node of paris cluster and one node of newyork cluster:
# geopg show zfssa-pg ..... SBP Script-based plug-in configurations: trancos ..... repcom1_create_config_args : ......paris:newuser@local-appliance.example.com,newyork:newuser@remote-appliance.example.com......