This step verifies that Ethernet addresses were placed in the SDR node
object.
If using: | Do this: |
---|---|
Perspectives |
|
SMIT |
|
splstdata | Attention: If your system is large, splstdata
returns great quantities of data. You may want to pipe the command
output through a filter to reduce the amount of data you see.
To display SDR boot/install data, enter: splstdata -b |
Perform this step if you have a switch or if you require any additional adapters.
If you are configuring more than eight of one particular adapter type, you must change the ifsize parameter in the tuning.cust file.
Be sure to have your switch configuration worksheet on hand with all the switch information completed before attempting to perform this step. RS/6000 SP: Planning, Volume 2, Control Workstation and Software Environment explains how to fill out your worksheet.
This step creates adapter objects in the SDR for each node. The data in the adapter objects is used during the customization or installation steps to configure the adapters on the nodes. You can configure the following adapter types with this procedure:
To configure adapters such as ESCON and PCA, you must configure the adapter manually on each node, using dsh, or modify the firstboot.cust file.
During the preceding operations, psspfb_script is run which unconfigures and reconfigures all adapters found in the SDR. If additional adapters are not registered in the Adapter class of the SDR, they will not be configured after psspfb_script completes.
This requirement also includes any ATM LAN Emulator adapters that are defined as enX. Those adapters must also be defined in the SDR, otherwise psspfb_script will unconfigure them during the preceding operations.
To configure your switch adapters for use with the RS/6000 SP system, use
SMIT or issue the spadaptrs command. RS/6000 SP:
Planning, Volume 2, Control Workstation and Software Environment
contains additional information on IP addressing for the switch.
If using: | Do this: |
---|---|
Perspectives |
From this point, you can follow the rest of the SMIT steps described in the
next row of this table.
|
SMIT |
The default css adapter attributes are:
If you want to select yes next to Skip IP Addresses for Unused Slots?, you must set the Use Switch Node Numbers to no. If you set the Use Switch Node Numbers to no, you must set Enable ARP to yes.
For css adapters, if you select yes next to Use Switch Node Numbers for css IP Addresses?, you must use the Start Frame, Start Slot, and Node Count fields. Start Slot must be set to 1. For css adapters, you must specify the adapter name, css0 or css1, in the Adapter Name field. Enter the following information for each consecutive block of nodes.
Starting Slot is always relative to the frame and not to the system. This means that the first slot in the second, third, and fourth frames is still slot 1 rather than slots 17, 33, and 49. For example, for the first frame you might enter: Start Frame 1 Start Slot 1 and for a second frame, you might enter: Start Frame 2 Start Slot 1 Node List is used to specify a group of node numbers separated by commas. Node numbers can be referenced for systems with more than one frame. (Node number 17 would be used for frame 2 slot 1.) For example: 1,5,7,9,15,17,19You can also specify a file that contains a single line of data containing the node list, separated by commas. Enter the full-path name, unless the file is in your current directory. For example, if you have a list of nodes in /tmp/node_list, enter the following in the Node List field: /tmp/node_list |
spadaptrs |
This example adds SDR information for a css (SP Switch and SP Switch2) network of 30 nodes (frame 1 slot 1 to frame 2 slot 16, with a wide node as the first node in each frame and the rest thin nodes, and a switch on each frame) with IP addresses from 129.33.34.1 to 129.33.34.30, and a netmask of 255.255.255.0. The IP addressing corresponds to the slots in the frame, with each wide node incrementing by 2 and each thin node incrementing by 1, and each high node by 4. If you specify the -s flag to skip IP addresses when you are setting the css switch addresses, you must also specify -n no to not use switch numbers for IP address assignment, and -a yes to use ARP. spadaptrs -s yes -n no -a yes 1 1 30 css0 129.33.34.1 255.255.255.0 |
To configure other additional adapters, for example Ethernet (en), token ring (tr), or FDDI (fi), you must select the Additional Adapter Database Information. For these adapters you can select either the Start Frame, Start Slot, and Node Count fields, or the Node List field.
Notes:
The distribution of your IP addresses determines how many times you perform this step. You may have to do it more than once if:
If using: | Do this: |
---|---|
Perspectives |
From this point, you can follow the rest of the SMIT steps described in the
next row of this table.
|
SMIT |
Start Slot must be set to 1. Enter the following information for each consecutive block of nodes.
|
spadaptrs | This example adds SDR information for an fi0 (FDDI adapter) network of 30
nodes (frame 1 slot 1 to frame 2 slot 16, with a wide node as the first node
in each frame and the rest thin nodes) with IP addresses from
129.33.34.1 to 129.33.34.30, and a
netmask of 255.255.255.0. The IP addressing
corresponds to the slots in the frame, with each wide node incrementing by 2
and each thin node incrementing by 1.
spadaptrs -s yes 1 1 30 fi0 129.33.34.1 255.255.255.0 This example adds SDR information for a tr0 (token ring adapter) for node 1 with IP address 129.33.35.1 and a netmask of 255.255.255.0, and references the node list field.
spadaptrs -l 1 -r 16 tr0 129.33.35.1 255.255.255.0 |
If using: | Do this: |
---|---|
spadaptrs (continued) | This example adds SDR information for an additional Ethernet adapter for
the second logical partition in a pSeries 690 server. The adapter is a
twisted pair Ethernet adapter with duplex, the speed set to auto-negotiate,
and is not the SP Ethernet adapter for the node. The IP address is
129.33.35.66 with a netmask of
255.255.255.0. The pSeries 690 server is
represented as frame 5, the node is assigned slot 2, and the adapter is
located at the physical location U1.9-P2-I2/E4.
spadaptrs -P U1.9-P2-I2/E4 -t tp -d auto -f auto 5 2 1 en \ 129.33.35.66 255.255.255.0 |
|To use the ml0 interface for running jobs over the switch, use |Perspectives, SMIT, or issue the spaggip command.
If using: | Do this: |
---|---|
Perspectives |
From this point, you can follow the rest of the SMIT steps described in the
next row of this table.
|
SMIT |
|
spaggip | For example, to add an aggregate IP address of
9.114.66.20 and a network mask of
255.255.255.0 for device ml0 on node 7, enter:
spaggip -i css0,css1 -1 7 9.114.66.20 255.255.255.0 |
|You only need to perform this step if you are configuring more than one |plane on your system. The default is automatically set to one |plane. To configure an SP Switch2 |two plane system, use Perspectives, SMIT, or issue the spswplane |command. To check the number of planes defined, issue:
|splstdata -e
If using: | Do this: |
---|---|
Perspectives |
|
SMIT |
|
spswplane | For example, to configure two switch planes on your SP system,
enter:
spswplane -p 2 |
Do this step if:
This step changes the default host name information in the SDR Node Objects used during customization to set up the host name on each node, and allows you to indicate how you want to name your RS/6000 SP nodes. The default is the long form of the |SP Ethernet administrative LAN adapter host name, which is how the |spadaptrs command processes defaulted host names.
You can indicate an adapter name other than |the SP Ethernet administrative LAN for the node host names to be used, as well as whether the long or short form should be used. |When determining whether you want the nodes' host name to be |either in long or short form, be consistent with the host name resolution on |the control workstation. If the host command returns the short |form of a host name, you should choose the short form for the node's |initial host name.
Multibyte host names are not supported on the SP.
If using: | Do this: |
---|---|
Perspectives |
|
SMIT |
|
sphostnam | This command indicates that the host name of each node is the long (fully
qualified) form of the host name of the css0 adapter, for a system
with two frames and 32 nodes.
sphostnam -a css0 1 1 32 |
The following list outlines the steps necessary to configure and customize the SP selected authentication and authorization methods:
This step sets the security capabilities to be installed on the nodes. If dce is selected, the DCE file sets will be installed on the nodes, and the security, CDS, clients, and RPC will be configured and started. The DCE file sets must be located in /spdata/sys1/install/name/lppsource on the control workstation to be installed automatically.
If k4 is selected, various Kerberos V4 configuration files will be installed.
If using: | Do this: |
---|---|
SMIT |
|
spsetauth | For example, enter:
spsetauth -p partition1 -i dce |
If you selected DCE as an authentication method, you must set a DCE
hostname for each node in the SDR. This step uses the nodes'
reliable hostname as the DCE hostname if a DCE hostname does not already
exist.
If using: | Do this: |
---|---|
SMIT |
|
create_dcehostname | For example, enter:
create_dcehostname |
This step updates the SDR with DCE master security and CDS server
hostnames.
If using: | Do this: |
---|---|
SMIT |
|
setupdce | For example, enter:
setupdce -u -s c186cw.pok.ibm.com -d c186cw.pok.ibm.com |
This step configures the admin portion of DCE clients.
If using: | Do this: |
---|---|
SMIT |
|
setupdce | For example, enter:
setupdce -c cell_admin -l /.:/lan_profile
|
This step configures SP Trusted Services into the DCE database. Data is entered into both the DCE registry and the Security Server database. You must have cell administrator authority to run this step.
This step creates SP Trusted Services principals and accounts. It
uses the /usr/lpp/ssp/config/spsec_defaults and
/spdata/sys1/spsec/spsec_overrides files described in Step 22.1: Update the spsec_overrides file (optional).
If using: | Do this: |
---|---|
SMIT |
|
config_spsec | For example, enter:
config_spsec -v
|
This step creates SP Trusted Services keyfiles. It uses the
/usr/lpp/ssp/config/spsec_defaults and
/spdata/sys1/spsec/spsec_overrides files described in Step 22.1: Update the spsec_overrides file (optional).
If using: | Do this: |
---|---|
SMIT |
|
create_keyfiles | For example, enter:
create_keyfiles -v |
After running the create_keyfiles command, you should reacquire SP administrative credentials as described in Step 24: Obtain credentials.
This step sets the authorization methods that will be used for AIX remote commands. It also calls updauthfiles to update security-related files such as /.k5login, /.rhosts, and /.klogin (as appropriate).
|A new option of none has been added to this menu. If |none is selected, no other authorization methods can be selected at |the same time for the selected system partition. The none |option can be selected only if all nodes are at PSSP 3.4 or |later.
|To enable none on any system partition, the secure remote |command method must have been enabled on the Site Environment Menu along with |the required restricted root access enablement.
|When none is selected, no PSSP entries are automatically |put in the .k5login, .rhosts, and |.klogin files by updauthfiles to enable root remote |command access for that system partition. If none is chosen |for all system partitions, there will be no PSSP entries in these |files. If some system partitions have authorization methods for AIX |remote commands defined, the .k5login, |.rhosts, and .klogin files will be created for |each of the authorizations enabled.
|Boot/install server nodes still require the rsh or |rcp capability if they are not the control workstation to use NIM |services. If none is selected as the AIX authorization method |for remote commands, it will be up to the administrator to add the |authorization methods necessary for boot/install activities.
|GPFS, IBM Virtual Shared Disk, Problem Management, and some |LoadLeveler functions (for example, llctl -g start or llctl -h |start) will not function with none enabled.
If using: | Do this: |
---|---|
SMIT |
|
spsetauth | For example, enter:
spsetauth -d -p partition1 dce |
This step enables the authentication methods that will be used for AIX remote commands.
Notes:
If using: | Do this: |
---|---|
SMIT |
|
chauthpar | For example, enter:
chauthpar -c -p partition1 k5 std |
This step enables the authentication methods that will be used for SP
Trusted Services.
If using: | Do this: |
---|---|
SMIT |
|
chauthpts | For example, enter:
chauthpts -c -p partition1 dce |
If you selected DCE as an authentication method and enabled DCE in the previous security steps, you must start the key management daemon on the control workstation. The key management daemon manages the DCE passwords associated with the SP Trusted Services. This daemon is started automatically on a node that is configured to use DCE authentication.
To start the key management daemon, issue:
/usr/lpp/ssp/bin/spnkeyman_start
At this point, you can optionally add an extension node to your system. Refer to Chapter 10, Installing extension nodes for more information.
The PSSP installation code sets up a single default system partition that includes all nodes in the system. This system partition is created automatically and is called the |default partition because it always exists, even on a system that |cannot be partitioned.
At this time you need to add and start the |RSCT subsystems. Topology Services (hats), host response (hr) are examples of |RSCT subsystems. |RSCT subsystems are managed by the syspar_ctrl command and are listed in the file /usr/lpp/ssp/config/cmi/syspar_subsystems. For a more complete description of |RSCT subsystems, refer to the "Managing system partition-sensitive subsystems using syspar_ctrl" section in PSSP: Administration Guide.
If using: | Do this: |
---|---|
Perspectives |
|
syspar_ctrl |
syspar_ctrl -A |
If using: | Do this: |
---|---|
Perspectives |
|
syspar_ctrl | Enter:
syspar_ctrl -E |
Before continuing with the install, verify that the following subsystems have been started and have an "active" state.
To see if these subsystems have been successfully started, issue the following command:
lssrc -a | grep default_syspar_name
For example, if your default system partition name is k22s, issue:
lssrc -a | grep k22s
The preceding command returns the following output:
hags.k22s hags 17134 active hats.k22s hats 22266 active hr.k22s hr 18228 active haem.k22s haem 21128 active hagsglsm.k22s hags 21338 active haemaixos.k22s haem 41000 active Emonitor.k22s emon inoperative
To continue with the install, the subsystems hags, hats, hr, and haem should all be active. If the subsystems are inactive, they should become active in a few minutes. Wait 3 minutes and check again.
If a single subsystem is inactive, simply try starting that particular subsystem by issuing:
syspar_ctrl -s subsystem_name
For example, if the subsystem is hags, issue:
syspar_ctrl -s hags
If more than one subsystem is inactive, stop and delete all of the |RSCT subsystems by issuing:
syspar_ctrl -D
Then try to add and start all of the |RSCT subsystems by issuing:
syspar_ctrl -A
If you still have inactive |RSCT subsystems, refer to PSSP: Diagnosis Guide for further information.
/usr/sbin/no -o ipforwarding=1
If you have exported the /spdata/sys1/install/image directory or any parent directory, you must unexport it using the exportfs -u command before running setup_server. You need to do this because NIM attempts to export /spdata/sys1/install/images/bos.obj.ssp.*, where bos.obj.ssp.* is the install image during setup_server processing. If you do not perform this task, you will receive an error. See the "Diagnosing NIM problems" chapter in PSSP: Diagnosis Guide for more information.
This step does the following:
|The default installation assumes one of the following: |
|You should establish an administrative principal that has the following |capabilities from the control workstation to the boot/install server nodes to |run commands such as spdelnode: |
|If you want different nodes to be installed by a different boot/install |server, you must specify the target nodes and which node will serve as the |boot/install server. For example, the first node of your second frame, |node 17, will be a boot/install server for the remaining 15 nodes in the |second frame. Use the spchvgobj command to enter this |information into the SDR. The syntax used in the example specifies a |start frame of 2, a starting slot of 2, and a count of 15 nodes. |Perspectives or SMIT can also be used, as shown in the table at the end of |this step.
|spchvgobj -r selected_vg -n 17 2 2 15
|After network installation is complete, if you have restricted root access |(RRA) enabled, you must perform the following steps:
|On the boot/install server node, you need to edit |/etc/sysctl.conf to include the following entries: |
|Using multiple boot/install servers in RRA is not recommended and is not |automatically supported by PSSP. However, depending on the size of your |system and network loads, it may not be possible to install your system with a |single boot/install server.
|Boot/install servers are NIM masters and, therefore, require rsh |and rcp access to both the control workstation and to the nodes they |serve. PSSP will not automatically create the correct entries in the |authorization files to allow these commands to work.
|To use additional boot/install servers, follow the following procedure to |manually establish the correct authorizations on your system.
|On the control workstation, the authorization files must have the following |changes, depending on the setting of auth_root_rcmd: |
|The default installation assumes your nodes have not been |preinstalled. If you want to have them installed with your own install |image, you must specify the following: |
There are |five ways you can specify the disk or disks to use for installation.
IBM strongly suggests that you use this format |for SCSI devices. It ensures that you install on the intended disk by targeting a specific disk at a specific location. The relative location of hdisks can change depending on the hardware installed or possible hardware failures. You should always use this format when there are external disk drives present, because the manner in which the device names are defined may not be obvious. For example, to specify a single SCSI drive, enter:
00-00-00-0,0
or enter multiple hardware locations separated by colons:
00-00-00-0,0:00-00-00-1,0
For example, to specify a single device name, enter:
hdisk0
or enter multiple device names separated by commas:
hdisk0,hdisk1
|To specify the parent-connwhere attribute:
|ssar//0123456789ABCDE
|or to specify multiple disks, separate using colons as follows:
|ssar//0123456789ABCDE:ssar//0123456789ABCDE
|The parent-connwhere format should only be used for SSA drives.
|For more information on acquiring ssar numbers, see AIX Kernel and |Subsystems Technical Reference, Volume 2.
|If a disk was previously configured as a physical volume in order for it to |be assigned to a volume group, a physical volume identifier (PVID) was |assigned to that disk by AIX. You can specify a disk by its PVID value |as a string of 16 hexadecimal characters. For example:
|00d4c45202be737f
|To specify multiple disks by their PVID values, separate the specifications |using colons:
|00d4c45202be737f:00d4c452eb639a2c
|Use the AIX lspv command to list the PVID values for the disks on |your system. For more information on making an available disk a |physical volume and setting its PVID, see AIX System Management |Guide: Operating System and Devices.
|Fibre channel attached disks are identified by a worldwide port name and a |logical unit identifier (LUN ID). To specify the SAN_DISKID, combine |the two values into a single string separated by "//". For example, if |the SAN target worldwide port name for a fibre channel attached disk is |0x50060482bfd12c9c and the LUN ID is 0x8000000000000000, the SAN_DISKID |specification would be:
|0x50060482bfd12c9c//0x8000000000000000
|To specify multiple fibre channel disks, separate the specifications using |colons:
|0x50060482bfd12c9c//0x8000000000000000:0x50060482bbffd7cb//0x0
|Use the AIX lsattr -EH -l hdisk command to determine the |worldwide port name and LUN ID for a disk.
|The hardware location, SSA parent-connwhere, PVID, and SAN_DISKID |formats can be used together. Specify multiple mixed format disk values |using colons to separate the specifications as follows:
00-00-09-0,1:ssar//0123456789ABCDE:00d4c45202be737f
|The device names format cannot be combined with any of the other |format types.
For more information on alternate root volume groups, see the "Managing root volume groups" appendix in PSSP: Administration Guide.
One way to significantly increase the availability of the SP system is to set up redundant copies of the operating system on different physical disks using the AIX disk mirroring feature. Mirroring the root volume group means that there will be multiple copies of the operating system image available to a workstation or node. Mirrored system images are distributed so that a node can remain in operation even after one of the mirrored units fail.
When installing a node, you have a choice of how many copies of the root volume group you would like. AIX allows one (the original), two (the original plus one), or three (the original plus two) copies of a volume group. IBM strongly suggests that the root volume group be mirrored for a total of at least two copies. PSSP provides commands to facilitate root volume group mirroring.
You can specify how many copies and which disks to use with the spchvgobj command. Care should be taken when specifying disks so that no other single point of failure is introduced. For example, the specified disks should not be attached to the same adapter.
The default setting for the number of copies is based on the node type. The default is one copy for all nodes except the POWER3 Symmetric Multiprocessor (SMP) High Node, which has a default of two copies. These nodes are assumed to contain dual internal disk drives as a standard configuration. The disks will automatically be used for mirroring. If these nodes were not configured with the dual internal disks or you do not want mirroring, use the spchvgobj command to change the settings before installing the node.
For a complete description of how mirroring is handled by PSSP, see the "Managing root volume groups" appendix in PSSP: Administration Guide.
|Change the default volume group information in the SDR to specify a
|different boot/install server, your own installation image, a different target
|installation disk or disks, or mirror root volume groups.
If using: | Do this: |
---|---|
Perspectives |
|
SMIT |
The distribution of the nodes to be served and the number of different
servers you want determines how many times you must perform this step.
You may have to do it more than once if you want to define more than one
server for different groups of nodes.
|
spchvgobj |
You can use the spchvgobj command using the hardware location format for disk locations 00-07-00-0,0 and 00-07-00-1,0 for node 9 and set the number of copies to two. For example: spchvgobj -r selected_vg -h 00-07-00-0,0:00-07-00-1,0 -1 9 -c 2 If you need to change the lppsource_name from default to a new lppsource_name such as aix433 for nodes 1 through 16, issue: spchvgobj -r selected_vg -v aix433 1 1 16 If you need to change the install_image_name from default to a new install_image_name such as bos.obj.ssp.433 for nodes 17, 18, 21, 22, issue: spchvgobj -r selected_vg -i bos.obj.ssp.433 -v aix433 -l 17,18,21,22 |
This step verifies that all the node information has been correctly entered
into the SDR.
If using: | Do this: |
---|---|
Perspectives |
|
SMIT | Check each of the List Database panels for correct information. If
you find any incorrect data, return to the following steps to make
corrections:
|
splstdata |
|
If your system is large, splstdata returns great quantities of data. You may want to pipe the command output through a filter to reduce the amount of data you see. |
At this point, you can optionally verify extension node information. Refer to Chapter 10, Installing extension nodes for more information.