Configuring the cluster to use sudo wrapper scripts

The system administrator must configure the IBM Storage Scale cluster to call the sudo wrapper scripts sshwrap and scpwrap to run IBM Storage Scale administration commands. To configure the cluster, either run the mmcrcluster command or the mmchcluster command with the --use-sudo-wrapper option.

Ensure that the --sudo-user UserName option is set as required for the IBM Storage Scale GUI and call home components when you use the mmcrcluster command or the mmchcluster command to configure the sudo wrappers.

Follow these steps to configure a new cluster or an existing cluster to call the sudo wrapper scripts:

  • To configure a new cluster to call the sudo wrapper scripts, use these steps:
    1. Log in with the user ID. This example uses gpfsadmin as the user ID.
    2. Issue the mmcrcluster command with the --use-sudo-wrapper option as shown in the following example:
      $ sudo /usr/lpp/mmfs/bin/mmcrcluster --use-sudo-wrapper -N c13c1apv7:quorum,c13c1apv8
      mcrcluster: Performing preliminary node verification ...
      mmcrcluster: Processing quorum and other critical nodes ...
      mmcrcluster: Processing the rest of the nodes ...
      mmcrcluster: Finalizing the cluster data structures ...
      mmcrcluster: Command successfully completed mmcrcluster: 
      Warning: Not all nodes have proper GPFS license designations.
      Use the mmchlicense command to designate licenses as needed.
      mmcrcluster: Propagating the cluster configuration data to all
      affected nodes. This is an asynchronous process
    3. To verify that the cluster is using sudo wrappers, run the mmlscluster command as shown in the following example:
      gpfsadmin@c13c1apv7 admin]$mmlscluster
      GPFS cluster information
      ========================
      GPFS cluster name: c13c1apv7.gpfs.net
      GPFS cluster id: 12275146245716580740
      GPFS UID domain: c13c1apv7.gpfs.net
      Remote shell command: /usr/lpp/mmfs/bin/sshwrap
      Remote file copy command: sudo wrapper in use
      Repository type: CCR
      Node Daemon node name  IP address        Admin node name    Designation
      -------------------------------------------------------------------------
      1 c13c1apv7.gpfs.net   192.168.148.117   c13c1apv7.gpfs.net  quorum
      2 c13c1apv8.gpfs.net   192.168.148.118   c13c1apv8.gpfs.net               
  • To configure an existing cluster to call the sudo wrapper scripts, use these steps:
    1. Log in with the user ID. This example uses gpfsadmin as the user ID.
    2. Issue the mmchcluster command with the --use-sudo-wrapper option to use the sudo wrappers:
      sudo /usr/lpp/mmfs/bin/mmchcluster --use-sudo-wrapper
    3. To verify that the cluster is using sudo wrappers, run the mmlscluster command with no parameters. If the sudo wrapper is configured properly, the output must contain the following two lines:
      
      Remote shell command: sudo wrapper in use
      Remote file copy command: sudo wrapper in use