Section 8: administration and privileged commands
courier_selinux – Security Enhanced Linux Policy for the courier processes Description Security-Enhanced Linux secures the courier processes via flexible mandatory access control. Nsswitch Domain If you want to allow users to login using a sssd serve for the courier_authdaemon_t, you must turn on the authlogin_nsswitch_use_ldap boolean. setsebool -P authlogin_nsswitch_use_ldap 1 If you want to allow…
courier_pop_selinux – Security Enhanced Linux Policy for the courier_pop processes Description Security-Enhanced Linux secures the courier_pop processes via flexible mandatory access control. The courier_pop processes execute with the courier_pop_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
courier_pcp_selinux – Security Enhanced Linux Policy for the courier_pcp processes Description Security-Enhanced Linux secures the courier_pcp processes via flexible mandatory access control. The courier_pcp processes execute with the courier_pcp_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
courier_authdaemon_selinux – Security Enhanced Linux Policy for the courier_authdaemon processes Description Security-Enhanced Linux secures the courier_authdaemon processes via flexible mandatory access control. The courier_authdaemon processes execute with the courier_authdaemon_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
couchdb_selinux – Security Enhanced Linux Policy for the couchdb processes Description Security-Enhanced Linux secures the couchdb processes via flexible mandatory access control. The couchdb processes execute with the couchdb_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
corosync_selinux – Security Enhanced Linux Policy for the corosync processes Description corosync_t SELinux domain type is now associated with cluster domain type (cluster_t). Please see cluster_selinux man page for more details. Commands semanage fcontext can also be used to manipulate default file context mappings. semanage permissive can also be used to manipulate whether or not…
corosync_overview – Corosync overview Overview The corosync project’s purpose is to implement and support a production quality Revised BSD licensed implementation of a high performance low overhead high availability development toolkit. Faults occur for various reasons: * Application Faults * Middleware Faults * Operating System Faults * Hardware Faults The major focus of high availability…
corosync – The Corosync Cluster Engine. Synopsis corosync [-f] [-p] [-r] [-v] Description corosync Corosync provides clustering infracture such as membership, messaging and quorum. Options -f Start application in foreground. -p Do not set process priority. -r Set round robin realtime scheduling (default). -t Test configuration and then exit. -v Display version and SVN revision…
corosync-xmlproc – Converts corosync.xml to the Corosync configuration file. Synopsis corosync-xmlproc input_xml [output_file] Description corosync-xmlproc Converts valid corosync.xml file to the Corosync configuration file format. Command internally uses xsltproc for XML conversion. Options input_xml Valid XML file to convert. output_file Destination file name. If parameter is – or omitted, output is written to standard output….
corosync-quorumtool – Set and display quorum settings. Synopsis corosync-quorumtool [-s] [-m] [-l] [-p] [-v votes] [-n nodeid] [-e expected] [-h] [-i] [-o <a|n|i>] [-V] Description Display the current state of quorum in the cluster and set vote quorum options. Options -s show quorum status -m constantly monitor quorum status -l list nodes -v <votes> change…
corosync-qnetd – QNet daemon Synopsis corosync-qnetd [-46dfhv] [-l listen_addr] [-p listen_port] [-s tls] [-c client_cert_required] [-m max_clients] [-S option=value[,option2=value2,…]] Description corosync-qnetd is a daemon running outside of the cluster with the purpose of providing a vote to the corosync-qdevice model net. It’s designed to support multiple clusters and be almost configuration and state free. New…
corosync-qnetd-tool – corosync-qnetd control interface. Synopsis corosync-qnetd-tool [-Hhlsv] [-c cluster_name] [-p qnetd_ipc_socket_path] Description corosync-qnetd-tool is a frontend to the internal corosync-qnetd IPC. Its main purpose is to show important information about the current internal state of corosync-qnetd. Options -H Properly shutdown the corosync-qnetd process -h Display a short usage text -l List all clients connected…
corosync-qnetd-certutil – tool to generate qnetd TLS certificates Synopsis corosync-qnetd-certutil [-i|-s] [-c certificate] [-n cluster_name] Description corosync-qnetd-certutil is a frontend for the NSS certutil, it is used for generating the QNetd CA (Certificate Authority), server certificate and signing cluster certificate used by corosync-qdevice when using the model ‘net’. Options -i Initialize the QNetd NSS certificate…
corosync-qdevice – QDevice daemon Synopsis corosync-qdevice [-dfh] [-S option=value[,option2=value2,…]] Description corosync-qdevice is a daemon running on each node of a cluster. It provides a configured number of votes to the quorum subsystem based on a third-party arbitrator’s decision. Its primary use is to allow a cluster to sustain more node failures than standard quorum rules…
corosync-qdevice-tool – corosync-qdevice control interface. Synopsis corosync-qdevice-tool [-Hhsv] [-p qdevice_ipc_socket_path] Description corosync-qdevice-tool is a frontend to the internal corosync-qdevice IPC. Its main purpose is to show important information about the current internal state of corosync-qdevice. Options -H Properly shutdown the corosync-qdevice process -h Display a short usage text -s Display the status of the corosync-qdevice…
corosync-qdevice-net-certutil – tool to generate qdevice model net TLS certificates Synopsis corosync-qdevice-net-certutil [-i|-m|-M|-r|-s|-Q] [-c certificate] [-n cluster_name] Description corosync-qdevice-net-certutil is a frontend for NSS certutil used for generating client certificate for the net model of qdevice. Options -i Initialize the QDevice Net NSS certificate database. The default directory for the database is /etc/corosync/qdevice/net/. This directory…
corosync-pload – Start payload test. Synopsis corosync-pload Description corosync-pload starts the pload service. This is used as a test tool to generate traffic. All nodes will begin transmitting messages and they will stop when 1500000 messages have been received per node. To view the progress of this execute: $ corosync-objctl runtime.services.pload. runtime.services.pload.service_id=13 runtime.services.pload.0.tx=3 runtime.services.pload.0.rx=2 runtime.services.pload.1.tx=2478788…
corosync-objctl – Configure objects in the Object Database Synopsis corosync-objctl [-c|-w|-d|-a|-t-h] <OBJECT-SPEC>… Description corosync-objctl is used to configure objects within the object database at runtime. Object-Spec There are two types of entities Objects and Key=Value pairs Objects Objects are container like entities that can hold other entities. They are specified as "objectA"."objectB". An example is…
corosync-notifyd – Listen for important corosync events and send dbus and/or snmp traps. Synopsis corosync-notifyd [-f] [-l] [-o] [-s] [-m] [manager] [-d] [-h] Description corosync-notifyd uses corosync API to listen for important cluster events and can log them, generate dbus signals or genterate snmp traps. Options -f Start application in foreground. -l Log all events….
corosync-keygen – Generate an authentication key for Corosync. Synopsis corosync-keygen [-k <filename>] [-l] Description If you want to configure corosync to use cryptographic techniques to ensure authenticity and privacy of the messages, you will need to generate a private key. corosync-keygen creates this key and writes it to /etc/corosync/authkey or to file specified by -k…