Authorization problems

This topic describes issues with running remote commands due to authorization problems in IBM Storage Scale.

The ssh and scp commands are used by GPFS administration commands to perform operations on other nodes. The ssh daemon (sshd) on the remote node must recognize the command being run and must obtain authorization to invoke it.

Note: Use the ssh and scp commands that are shipped with the OpenSSH package supported by GPFS. Refer to the IBM Storage Scale FAQ in IBM® Documentation for the latest OpenSSH information.

For more information, see Problems due to missing prerequisites.

For the ssh and scp commands issued by GPFS administration commands to succeed, each node in the cluster must have an .rhosts file in the home directory for the root user, with file permission set to 600. This .rhosts file must list each of the nodes and the root user. If such an .rhosts file does not exist on each node in the cluster, the ssh and scp commands issued by GPFS commands fail with permission errors, causing the GPFS commands to fail in turn.

If you elected to use installation specific remote invocation shell and remote file copy commands, you must ensure:
  1. Proper authorization is granted to all nodes in the GPFS cluster.
  2. The nodes in the GPFS cluster can communicate without the use of a password, and without any extraneous messages.