Example Of Host Name Resolution; Example Of Klist -Srvtab Command On The Control Workstation - IBM RS/6000 SP Problem Determination Manual

3.8.5 TCP/IP
Check that TCP/IP is functioning correctly by using the
communication with the various adapters on each node. Also use the host
<hostname> and host <IP address> commands to ensure that hostname
resolution is correct (both commands must return the same output).
Figure 38. Example of Host Name Resolution
3.8.6 Remote Principals
Ensure that the remote user or client has permission to invoke commands on the
local user account. If the originating remote user is authenticated to one of the
principals named in the .klogin file, access is granted to that account.
Note: If a klogin file is present, the owner must also be listed in order to gain
access to the user's own account from a remote host.
3.8.7 Service Key Files
First check that the service key files (/etc/krb-srvtab) exist on all nodes. Use
either the
service keys in the /etc/krb-srvtab files.
Figure 39. Example of klist -srvtab Command on the Control Workstation
The service key version numbers in the /etc/krb-srvtab files must match the
version number kept in the Kerberos authentication database. Use the
/usr/lpp/ssp/kerberos/etc/kdb_util
authentication database to an ASCII file. The fifth field in this file is the service
key version number.
If there are any problems with the service key files, then they must be re-created
using the
"Diagnosing Authentication Problems," in the RS/6000 Scalable POWERparallel
Systems: Diagnosis and Messages Guide , GC23-3899 for further information.
84
SP PD Guide
root@sp21cw0 /tmp > host sp21cw0
sp21cw0 is 9.12.60.99, Aliases: sp21en0
root@sp21cw0 /tmp > host 9.12.60.99
sp21cw0 is 9.12.60.99, Aliases: sp21en0
ksrvutil
or the
root@sp21cw0 /etc > klist -srvtab
Server key file: /etc/krb-srvtab
Service Instance
------------------------------------------------------
hardmon sp21cw0
rcmd sp21cw0
rcmd sp21tr0
hardmon sp21tr0
/usr/lpp/ssp/kerberos/etc/ext_srvtab
This soft copy for use by IBM employees only.
klist
command to show the version numbers of the
Realm Key Version
SP21CW0 1
SP21CW0 1
SP21CW0 1
SP21CW0 1
command to dump the contents of the
command. See Chapter 6,
ping
command to confirm