Search <book_title>...

Storage Foundation for Oracle® RAC 7.4.1 Configuration and Upgrade Guide - Solaris

Last Published: 2019-06-18

Product(s): InfoScale & Storage Foundation (7.4.1)

Platform: Solaris

Configuring the authentication broker on node sys5

To configure the authentication broker on node sys5

Extract the embedded authentication files and copy them to temporary directory:

# mkdir -p /var/VRTSvcs/vcsauth/bkup

# cd /tmp; gunzip -c /opt/VRTSvcs/bin/VxAT.tar.gz | tar xvf -

Edit the setup file manually:

# cat /etc/vx/.uuids/clusuuid 2>&1

The output is a string denoting the UUID. This UUID (without { and }) is used as the ClusterName for the setup file.

{UUID}

# cat /tmp/eat_setup 2>&1

The file content must resemble the following example:

AcceptorMode=IP_ONLY

BrokerExeName=vcsauthserver

ClusterName=UUID

DataDir=/var/VRTSvcs/vcsauth/data/VCSAUTHSERVER

DestDir=/opt/VRTSvcs/bin/vcsauth/vcsauthserver

FipsMode=0

IPPort=14149

RootBrokerName=vcsroot_uuid

SetToRBPlusABorNot=0

SetupPDRs=1

SourceDir=/tmp/VxAT/version

Set up the embedded authentication file:

# cd /tmp/VxAT/version/bin/edition_number; \
./broker_setup.sh/tmp/eat_setup

# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vssregctl -s -f 
/var/VRTSvcs/vcsauth/data/VCSAUTHSERVER/root/.VRTSat/profile \
/VRTSatlocal.conf -b 'Security\Authentication \
\Authentication Broker' -k UpdatedDebugLogFileName \
-v /var/VRTSvcs/log/vcsauthserver.log -t string

Copy the broker credentials from one node in the cluster to sys5 by copying the entire bkup directory.
The bkup directory content resembles the following example:
```
# cd /var/VRTSvcs/vcsauth/bkup/
```
```
# ls
```
```
CMDSERVER  HAD  VCS_SERVICES  WAC
```

Import the VCS_SERVICES domain.

# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/atutil import -z \
/var/VRTSvcs/vcsauth/data/VCSAUTHSERVER -f /var/VRTSvcs/vcsauth/bkup \
/VCS_SERVICES -p password

Import the credentials for HAD, CMDSERVER, and WAC.

# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/atutil import -z \
/var/VRTSvcs/vcsauth/data/VCS_SERVICES -f /var/VRTSvcs/vcsauth/bkup \
/HAD -p password

Start the vcsauthserver process on sys5.

# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vcsauthserver.sh

Perform the following tasks:

# mkdir /var/VRTSvcs/vcsauth/data/CLIENT

# mkdir /var/VRTSvcs/vcsauth/data/TRUST

# export EAT_DATA_DIR='/var/VRTSvcs/vcsauth/data/TRUST'

# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vssat setuptrust -b \
localhost:14149 -s high

Create the /etc/VRTSvcs/conf/config/.secure file:
```
# touch /etc/VRTSvcs/conf/config/.secure
```