The system administrator must configure the IBM Storage Scale cluster to call the sudo wrapper scripts
sshwrap
and scpwrap
to run IBM Storage Scale administration commands. To configure the cluster,
either run the mmcrcluster command or the mmchcluster command
with the --use-sudo-wrapper option.
Ensure that the --sudo-user UserName option is set as
required for the IBM Storage Scale GUI and call home components
when you use the mmcrcluster command or the mmchcluster
command to configure the sudo wrappers.
Follow these steps to configure a new cluster or an existing cluster to call the sudo wrapper
scripts:
- To configure a new cluster to call the sudo wrapper scripts, use these steps:
- Log in with the user ID. This example uses
gpfsadmin
as the user
ID.
- Issue the mmcrcluster command with the
--use-sudo-wrapper option as shown in the following example:
$ sudo /usr/lpp/mmfs/bin/mmcrcluster --use-sudo-wrapper -N c13c1apv7:quorum,c13c1apv8
mcrcluster: Performing preliminary node verification ...
mmcrcluster: Processing quorum and other critical nodes ...
mmcrcluster: Processing the rest of the nodes ...
mmcrcluster: Finalizing the cluster data structures ...
mmcrcluster: Command successfully completed mmcrcluster:
Warning: Not all nodes have proper GPFS license designations.
Use the mmchlicense command to designate licenses as needed.
mmcrcluster: Propagating the cluster configuration data to all
affected nodes. This is an asynchronous process
- To verify that the cluster is using sudo wrappers, run the
mmlscluster command as shown in the following example:
gpfsadmin@c13c1apv7 admin]$mmlscluster
GPFS cluster information
========================
GPFS cluster name: c13c1apv7.gpfs.net
GPFS cluster id: 12275146245716580740
GPFS UID domain: c13c1apv7.gpfs.net
Remote shell command: /usr/lpp/mmfs/bin/sshwrap
Remote file copy command: sudo wrapper in use
Repository type: CCR
Node Daemon node name IP address Admin node name Designation
-------------------------------------------------------------------------
1 c13c1apv7.gpfs.net 192.168.148.117 c13c1apv7.gpfs.net quorum
2 c13c1apv8.gpfs.net 192.168.148.118 c13c1apv8.gpfs.net
- To configure an existing cluster to call the sudo wrapper scripts, use these steps:
- Log in with the user ID. This example uses
gpfsadmin
as the user
ID.
- Issue the mmchcluster command with the
--use-sudo-wrapper option to use the sudo wrappers:
sudo /usr/lpp/mmfs/bin/mmchcluster --use-sudo-wrapper
- To verify that the cluster is using sudo wrappers, run the
mmlscluster command with no parameters. If the sudo wrapper is configured
properly, the output must contain the following two lines:
Remote shell command: sudo wrapper in use
Remote file copy command: sudo wrapper in use