Enabling SSH user equivalence resets umask to 0077

Hi,
I'm about to install Oracle 10g RAC on Red Hat Linux AS/ES 40 update 2. While configuring Secure Shell I noticed that after I enabled SSH user equivalence, umask gets changed from 022 to 077. Guess I could change umask to 022 before installing the software but is this supposed to happen?
Thanks,

I noticed umask had changed to 077 when I enabled user equivalence to log into a remote server without having to enter a password.
$ umask
0022
$ /usr/bin/ssh-agent $SHELL
$ /usr/bin/ssh-add
Enter passphrase for /home/oracle/.ssh/id_rsa:
Identity added: /home/oracle/.ssh/id_rsa (/home/oracle/.ssh/id_rsa)
Identity added: /home/oracle/.ssh/id_dsa (/home/oracle/.ssh/id_dsa)
$ umask
0077

Similar Messages

Not able to enable SSH user equivalency for RAC on RHEL 4

Hi All,
I am trying to install oracle RAC 11g on RHEL4 (on VMware), I am using below document for reference.
http://www.oracle-base.com/articles/11g/OracleDB11gR1RACInstallationOnOEL5UsingVMware.php
Every thing went fine till "SSH user equivalency", but I am not able to SSH and SCP between servers without entering passwords.
I have tried removing .ssh folder & recreating pub file twice but it did not helped.
am i missing something?
Please advice.
Thanks,
Abhay.

Configure SSH on each node in the cluster. Log in as the "oracle" user and perform the following tasks on each node.
su - oracle
mkdir ~/.ssh
chmod 700 ~/.ssh
/usr/bin/ssh-keygen -t rsa # Accept the default settings.
The RSA public key is written to the ~/.ssh/id_rsa.pub file and the private key to the ~/.ssh/id_rsa file.
Log in as the "*oracle*" user on RAC1, generate an "authorized_keys" file on RAC1 and copy it to RAC2 using the following commands.
su - oracle
cd ~/.ssh
cat id_rsa.pub >> authorized_keys
scp authorized_keys rac2:/home/oracle/.ssh/
Next, log in as the "oracle" user on RAC2 and perform the following commands.
su - oracle
cd ~/.ssh
cat id_rsa.pub >> authorized_keys
scp authorized_keys rac1:/home/oracle/.ssh/
The "authorized_keys" file on both servers now contains the public keys generated on all RAC nodes.
To enable SSH user equivalency on the cluster member nodes issue the following commands on each node.
ssh rac1 date
ssh rac2 date
ssh rac1.localdomain date
ssh rac2.localdomain date
exec /usr/bin/ssh-agent $SHELL
/usr/bin/ssh-add
You should now be able to SSH and SCP between servers without entering passwords.
hope, this may helps you.
enjoy.
if you are unable to resolve it, please refer:-
http://download.oracle.com/docs/cd/B28359_01/rac.111/b28252/preparing.htm#BGBBDHIB
http://dsstos. blogspot.com/2009/03/linux-oracle-rac-and-bonding-conundrum.html

Error:Provide Host List - SSH User equivalence is not set up on the remote

Hello,
I've been receiving an error from OEM 10g GC when I attempt to execute a fresh install of the Agent:
"1. Provide Host List - SSH User equivalence is not set up on the remote nodes."
I'm using OEM Grid Control version 10.1.0.4 on a Solaris 10 platform. The agent will be installed on many 8i (post-8.1.7.4), 9i, and 10g clients.
I've tried most, if not all, of the standard fixes that I've found online (such as Metalink note 376355.1).
Has anybody had difficulties with this error, and what other fixes could I try besides the one in note 376355.1? Could this be an OS configuration issue, or something else?
Thanks.

How are you pushing the agent from 10104. This feature is not there in 10104
this is supported from 10201
http://www.oracle.com/technology/products/oem/pdf/10gr2_agent_deploy_bp.pdf

Enable portal users to reset their own password

Dear Forum,
I want our users to be able to reset their own password in our portal solution (NW7.01). I tried to add "pcd:portal_content/com.sap.pct/every_user/general/com.sap.portal.eu_role" but it gives too many options, users should not be able to change their name only password. I thought about changing UME parameters "UME Manage_My_Password
UME Manage_My_Profile" But I am in doubt where to change this in VA. I guess some security settings also apply (lenght, digits, capital letters etc) which should be in the security tab?
I hope someone can elaborate.
Thanks in advance,
Kind Regards,
Soren

Hi Manoj,
UME parameters are in visual admin of the java stack - not sure if this was what you were asking. i was hoping that there was a parameter I could set which would apply a additional button on login screen where you could reset your password, or maybe do it from the portal / personal settings yourself.
I am not much into programming web dynpro tools, so I think ill try to see if I could find a way to enable "forgot your password?" on the login page where you can mail a new password for yourself.
Thanks tho for the link, its much appreciated!
Kind Regards,
Soren

SSH User equivalence is not set up on the remote nodes

I'm getting the above message when trying to push deploy a Linux agent 10.2.0.2 from an OEM.
I have run the sshUserSetupNT.sh succesfully - I believe there were no error messages being returned.
I can cygwin ssh to connect successfully to the linux box and issue commands without providing a password.
- and I've run the failing command from the log below successfully from a command prompt. (changed it to run date)
C:/cygwin/bin/ssh.exe -o FallBackToRsh=no -o PasswordAuthentication=no -o StrictHostKeyChecking=yes -l oraoem centos5 /bin/sh -c '/bin/date '
I appears to be complaining about an RSA key - but how can that be when I can connect from a command prompt succesfully.
Any suggestions!
snip from deployment logfile
=======================================================================
Performing check for CheckSSHEquivalence
Does SSH equivalence exist with the remote nodes
Setting username to oraoem
Setting FallbackToRSH to false
Setting REMOTE_PATH_PROPERTIES_LOC to D:\OracleHomes\oms10g\/sysman/agent_download/10.2.0.2.0/linux/agentdeploy
C:\WINDOWS\system32\ping.exe#centos5#-n#5#-w#5000
C:\WINDOWS\system32\ping.exe centos5 -n 5 -w 5000
Exitcode of the remote command [rnode centos5]: 0
Errstream [rnode centos5]:
CommandResult status [rnode centos5]: true
C:/cygwin/bin/ssh.exe#-o#FallBackToRsh=no#-o#PasswordAuthentication=no#-o#StrictHostKeyChecking=yes#-l#oraoem#centos5#/bin/sh#-c#'/bin/true '
C:/cygwin/bin/ssh.exe -o FallBackToRsh=no -o PasswordAuthentication=no -o StrictHostKeyChecking=yes -l oraoem centos5 /bin/sh -c '/bin/true '
Exitcode of the remote command [rnode centos5]: 255
Errstream [rnode centos5]: No RSA host key is known for centos5 and you have requested strict checking.
Host key verification failed.
CommandResult status [rnode centos5]: false
Expected result: centos5
Actual Result: Problem: 'PROV-16018: The command C:/cygwin/bin/ssh.exe failed.'
Check complete. The overall result of this check is: Failed <<<<
Check complete: Failed <<<<
Problem: SSH equivalence check has failed
Recommendation: Setup SSH equivalence with the remote hosts and retry

Reboot the box and try again.

User equivalence check failed for user "oracle".

Hi,
I am trying to install the Oracle Clusterware 10g as part of my RAC setup.
I have configured RHEL 4 in 2 nodes (rac and rac2). But when I run the runcluvfy utility, I get the below error:
[oracle@rac cluvfy]$ ./runcluvfy.sh stage -pre crsinst -n rac,rac2
Performing pre-checks for cluster services setup
Checking node reachability...
Node reachability check passed from node "rac".
Checking user equivalence...
User equivalence check failed for user "oracle".
Check failed on nodes:
rac
WARNING:
User equivalence is not set for nodes:
rac
Verification will proceed with nodes:
rac2
The problem is only with the first node(rac). The second node passes succesfully.
ssh works fine. Not sure what is wrong!
Thanks!

Did you do Configure SSH for User Equivalence ?
Or
Did you Establish User Equivalence ?
If yes.. please check...
$ ssh rac hostname
rac
$ ssh rac2 hostname
rac2
You should Establish User Equivalence before...
exec /usr/bin/ssh-agent $SHELL
/usr/bin/ssh-add
If You don't configure ssh for user equivalence
http://www.oracle.com/technology/pub/articles/smiley_rac10g_install.html
Or
read SSH User equivalence is not set up on the remote nodes

How to enable fast user switching remotely via SSH?

There is a Mac which at the moment doesn't allow fast user switching. I have admin account on this Mac. Currently, another user is logged in, so I can access the Mac only via SSH. I don't want to destroy the session of that user otherwise the user can loose important data.
Can I enable fast user switching by accessing the Mac via SSH?

Try this:
defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled -bool YES

User equivalence in RAC

This is a question regarding resetting the user equivalence on clustered hosts. Our company has a 3-node 10.2.0.3 RAC cluster running CRS w/ an ASM system for the DB (Linux64). I just finished rebuilding our Grid Control deployment on a new host (bringing it up to 10.2.0.5) and have been steadily redeploying the agents. The last boxes on the list were those associated with the production RAC cluster. During installation, you have the option to install to all 3 nodes simultaneously from a single node, however when I attempted this, I was informed that password-less ssh communication between the 3 nodes was not available. Not a big problem since I just went through the installs on each box locally and each host and its targets are now reporting to the Grid Control quite well. It even properly detects that the database is clustered.
However, a Grid critical alert continues to inform me that "User equivalence unavailable on all the nodes", and I decided to investigate the possibilities of rectifying this. Initially I tried copying appropriate files out of the ~/.ssh directory to other boxes, but that's when I discovered that the keys had been pass-phrased and neither myself nor the other DBA here know what that pass-phrase is (accurate, centrally managed password management was something I put in place when I arrived to prevent this very thing going forward - thank you KeePass)
My initial thought was to figure out which boxes currently interact with the RAC boxes, and then regenerate the keys per [note 300548.1|300548.1]. Now, I've only been working with RAC for 6 months since I switched jobs, so while I'm getting more comfortable with the tech, there's still a lot I haven't explored thus far, and we don't have a test RAC environment for me to just start trying things (it's in the pipe). The other DBA here has more experience with RAC, but hasn't actually set one up, so neither of us knows for sure what the full ramifications of resetting the keys might be. Could this effect CRS negatively or is it using its own connections through ports on the private network addresses? Aside from non-clustered boxes needing their keys updated, are there any other considerations we should be thinking about?
Thanks!

"User equivalence unavailable on all the nodes"After install Oracle RAC and you create phrase key (have password), you'll find it. You can ignore after install Cluster completely
But when you use "cluvfy" or etc... about RAC (dbca/netca)
you have to
$ exec /usr/bin/ssh-agent $SHELL
$ /usr/bin/ssh-add
on metalink 300548.1, they try to told us... create key with no password
$ ssh-keygen -t rsa
Now accept the default location for the key file
Enter and confirm a passphrase. (you can also press enter twice).
$ ssh-keygen -t dsa
Now accept the default location for the key file
Enter and confirm a passphrase. (you can also press enter twice).
So, When we use cluvfy" or etc... (with creating key with no password), we don't run "ssh-agent $SHELL" ...
and I think You'll not find "User equivalence unavailable on all the nodes" as well.

CLUVFY failing with 'User Equivalence check failed for...'

New 2 node RAC configuration. Oracle 10gR2, Linux RHEL 5 x64. I'm at the post hardware config, pre install clusterware stage.
Running the cluster verification utility command:
cluvfy comp sys -n node-01,node-02 -p crs -verboseReturns the following error:
Verifying system requirement
ERROR:
User equivalence unavailable on all the nodes.
Verification cannot proceed.
Verification of system requirement was unsuccessful on all the nodes.I've verified the following:
1) RSA keys correctly configured on both nodes and I can ssh between without a password
2) ping ip and private work correctly to and from both nodes.
3) user, group ids are identical on both systems.
I also ran cluvfy stage -post hwos -n node-01,node-02 -verbose and received the following output. This output is from node-01. node-02's is identical, except with equivalence to itself failing.
Checking node reachability...
Check: Node reachability from node "node-01"
Destination Node                      Reachable?
node-02                       yes
node-01                       yes
Result: Node reachability check passed from node "node-01".
Checking user equivalence...
Check: User equivalence for user "oracle"
Node Name                             Comment
node-02                       passed
node-01                       failed
Result: User equivalence check failed for user "oracle".
WARNING:
User equivalence is not set for nodes:
        node-01
Verification will proceed with nodes:
        node-02
Checking node connectivity...I get the same behavior on both nodes. Not quite sure what else to check. Any thoughts or suggestions? Thanks.

No, no banners. And I followed note 300548.1 to the letter. Several times :-)
However, I believe my issue has to do with a CVUHOME/cv/admin/cvu_config.
According to the documentation:
CV_XCHK_FOR_SSH_ENABLED—If set to TRUE, it enables the X-Windows check for verifying user equivalence with ssh. By default, this entry is commented out and X-Windows check is disabledIt was not, unfortunately, disabled by default - once I set it to false, everything succeeded. I still need to figure out why XCHK itself is failing, but I think I can troll through the log to figure that out.

User equivalence check failed for user "oracle" while running cluvfy

Hi All,
I am getting User equivalence error as follows while executing cluvfy. I want to install CRS on this server.
oracle@node200$ ./runcluvfy.sh stage -pre crsinst -n node200,node201,node202
Performing pre-checks for cluster services setup
Checking node reachability...
Node reachability check passed from node "node200".
Checking user equivalence...
User equivalence check failed for user "oracle".
Check failed on nodes:
node202,node201,node200
ERROR:
User equivalence unavailable on all the nodes.
Verification cannot proceed.
Pre-check for cluster services setup was unsuccessful on all the nodes.
I have sucessfully configured ssh and able to do ssh from all the nodes without prompting for the password. Also oracle uid and gid on all the servers are same.
I also checked in .kshrc file and there is no tty entry in that file. and I have also setup /etc/hosts.equiv file on all the node.
I still get the user equivalance error. Can anybody help me in this ?
Regards,
Raj.

Hi,
thanks.
i need some more help because first time i am working on RAC,
i am also having User equivalence check failed for user "oracle"
i got two machines, one is IBM machine and one is DELL machine installed with solais 10 (AIX installation). both machines are not connected by private network now. and no shared external HDD available now. it will take one week time to set up the HW. the user equivalence check depends the above two factors?
now public network is available and node reachability test "passed"
could you please tell me what may be the reason for the user equivalence check in my case. details are given below
i have oracle user in both machine. user creation done through SMC. home directory is /export/home/oracle
the following are the details.
1) $ ssh pc000905 id -a oracle
Enter passphrase for key '/home/oracle/.ssh/id_rsa':
uid=100(oracle) gid=300(oinstall) groups=301(dba)
$ ssh pc026376 id -a oracle
Enter passphrase for key '/home/oracle/.ssh/id_rsa':
uid=100(oracle) gid=300(oinstall) groups=301(dba)
2) user nobody exists.
3) all files n .ssh directory have same permissions.
4) ssh and scp is working with out password(rsa and dsa keys generated).
5) oracle user is using bourne shell
6)soft link of /usr/bin/ssh and /usr/bin/scp are created to /export/home/oracle/bin
7)ForwardX11 is "yes" in sshd_config
8) created a config file in .ssh directory and ForwardX11 is "no" in that file
8) umask =022 in both nodes.
error displaying is
$/export/gome/cluvfy/runcluvfy.sh stage -pre crsinst -n pc026376,pc000905
Performing pre-checks for cluster services setup
Checking node reachability...
Node reachability check passed from node "PC026376".
Checking user equivalence...
User equivalence check failed for user "oracle".
Check failed on nodes:
pc026376,pc000905
ERROR:
User equivalence unavailable on all the nodes.
Verification cannot proceed.
Pre-check for cluster services setup was unsuccessful on all the nodes.
$

User equivalence check failed in solaris 10

Hi,
i am trying to install oracle clusterware on solaris10.
when i executed clusture varification utility , user equivalence test is failed.
each node have same username,userid,group id
and i configured SSH also using
exec /user/bin/ssh-agent
/usr/bin/ssh-add after generation of rsa and dsa keys and putting this to authorization file.
it is not asking password for ssh and scp after executing this command but again user equivalence check failed
but after logging of and do login again to oracle user its not working. then again i have to set ssh that is
exec /user/bin/ssh-agent
/usr/bin/ssh-add
wat else i have to check for this?
can sombody help me to solve this

Umesh Gupta wrote:
Thay are same, i have already taken care of that..
Node1:-
$ id oracle
uid=101(oracle) gid=300(oinstall)
Node2:-
$ id oracle
uid=101(oracle) gid=300(oinstall)
Please suggest..
Regards
Umesh$exec /usr/bin/ssh-agent $SHELL
$/usr/bin/ssh-add
on any one of the nodes
and check the output of cluvfy
also refer the link:-
http://download.oracle.com/docs/cd/B28359_01/install.111/b28263/crsunix.htm#BEHIHBBF
User equivalence check failed (RAC setup)
Edited by: rajeysh on Aug 18, 2011 7:09 PM

Help-ColdFusion - enabling a user to search for records in a database by entering a startand end date - (CREATEODBCDATE)

I want to enable a user to enter a start and end date to
define the period they want to search for records of members who
joined on certain dates. Funny thing is...I've got it to work half
of the time. For e.g. I have 4 records between 26/10/2005 and
1/08/2006. When I enter 01/01/2005 as startDate and 31/08/2006 as
endDate, I get the 4 records. However, if I alter the endDate to
01/09/2006 I get every record in the database!!!??? Why's this? I
can't get my head around it!
Here's my code:
First the code for the form the user input the search
criteria on:
<html>
<body>
<FORM action="memberJDateSearch.cfm" method="post">
<p>Start Date: <input type="text"
name="startDate">
<br>End Date: <input type="text" name="endDate">
<input type="reset" value="Clear">
<input type="submit" value="Submit">
</FORM>
</body>
</html>
Simple enough. Now the code for the process and display page:
<html>
<body>
<cfquery name="memberJDateSearch"
datasource="jpkelle2-access">
SELECT *
From members
WHERE ((joinDate BETWEEN #CreateODBCDate(startDate)# AND
#CreateODBCDate(endDate)#))
</cfquery>
<table border=1 bgcolor="beige" cellpadding="3"
cellspacing="0">
<tr>
<th>Member ID</th>
<th>Name</th>
<th>Sex</th>
<th>Date of Birth</th>
<th>Address</th>
<th>Email</th>
<th>Date Joined</th>
</tr>
<CFOUTPUT Query="memberJDateSearch">
<tr>
<td><center>#memberID#<center></td>
<td width="15%">#forename# #initial#
#surname#</td>
<td>#sex#</td>
<td width="10%">#disp('#dob#')#</td>
<td>#address#, #town#, #county#, #postCode#</td>
<td>#email#</td>
<td width="10%">#disp('#joinDate#')#</td>
</tr>
</CFOUTPUT>
</table>
<hr><p>End of members list.</p>
</body>
</html>
any ideas? please help me.

Try formatting your dates first (before the CreateODBCDate
call). I just tried this on my test page and it worked properly. I
removed the DateFormat calls, keeping the dates in your format and
it didn't work. See if something like the following will help:
<cfset startDate =
DateFormat("31/01/2006","dd/mm/yyyy")/>
<cfset endDate =
DateFormat("01/09/2007","dd/mm/yyyy")/>
<cfquery name="memberJDateSearch"
datasource="jpkelle2-access">
SELECT *
From members
WHERE ((joinDate BETWEEN #CreateODBCDate(startDate)# AND
#CreateODBCDate(endDate)#))
</cfquery>

How to solve the issue "CUV check user equivalence failed" ?

Folks,
Hello. I am installing Oracle 11gR2 RAC using 2 VMs (rac1 and rac2) whose OS are Oracle Linux 5.6 in VMPlayer according to the website http://appsdbaworkshop.blogspot.com/2011/10/11gr2-rac-on-linux-56-using-vmware.html
In order to install Grid Infrastructure, we need to run Cluster Utility Verification (CUV) at first by running the cammand below:
[ora11g@rac1 grid]$ ./runcluvfy.sh stage -pre crsinst -n rac1,rac2 -verbose
Its output:
Performing pre-checks for cluster services setup
Check: User equivalence for user “ora11g”
Node Comment
rac1 failed
rac2 failed
Result: PRVF-4007 : User equivalence check failed for user “ora11g”
ERROR:
User equivalence unavailable on all the specified nodes
Verification cannot proceed
Pre-check for cluster services setup was unsuccessful on all the nodes.
As you see above, check user equivalence failed. I have run the 4 commands to fix this error as below:
[ora11g@rac1 /]$ ssh-keygen
Its output:
Generating public/private rsa key pair.
Enter file in which to save the key (/home/grid/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/grid/.ssh/id_rsa.
Your public key has been saved in /home/grid/.ssh/id_rsa.pub.
The key fingerprint is:
0c:10:6c:3b:ae:21:63:64:f8:0d:0e:d8:f0:41:32:ff [email protected]
[ora11g@rac1 .ssh]$ cat *pub >>authorized_keys
[ora11g@rac1 .ssh]$ ssh rac1
Its output:
The authenticity of host ‘rac1 (127.0.0.1)’ can’t be established.
RSA key fingerprint is 9d:ae:51:7c:72:81:07:37:31:92:f1:c8:90:bc:52:55.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘rac1′ (RSA) to the list of known hosts.
Write failed: Broken pipe.
[ora11g@rac1 .ssh]$ ssh rac1-priv
Its output:
The authenticity of host ‘rac1-priv (192.168.137.35)’ can’t be established.
RSA key fingerprint is 9d:ae:51:7c:72:81:07:37:31:92:f1:c8:90:bc:52:55.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘rac1-priv,192.168.137.35′ (RSA) to the list of known hosts.
Write failed: Broken pipe.
After run the 4 commands above, I run the command below again:
[ora11g@rac1 grid]$ ./runcluvfy.sh stage -pre crsinst -n rac1,rac2 -verbose
Its output is the same:
PRVF-4007 : User equivalence check failed for user “ora11g”
ERROR:
User equivalence unavailable on all the specified nodes
Verification cannot proceed
I think the problem is "Broken pipe" and ssh cannot write authorized_keys to the machines.
My question is:
Do any folk understand how to solve the issue CUV "check user equivalence failed" for 2 VMs ?
Thanks.

Folks,
Hello. Thanks a lot for replying.
I have installed Grid Infrastructure a few times. Each time, on step 7 of 9, the installer fixes and checks 2 machines correctly. The entire installation has 3 parts as below:
1) Install Grid Infrastructure for a Cluster
2) Execute Root Scripts for Install Grid Infrastructure for a Cluster (script is root.sh)
3) Configure Oracle Grid Infrastructure for a Cluster that includes NCA, ASMCA, PICA and CVU.
Each time, on step 8 of 9, the Installer installs Grid Infrastructure for a Cluster successfully that includes "Prepare, Copy files, Link binaries, Setup files and Perform remote operations".
But when the Installer get to part 3 CVU, it fails and then the Database cannot be installed.
Deinstall Grid is a very complicated process to do. Because of this reason, we need to run CVU at first to make sure everything is correct for 2 machines before install Grid.
Even we ignore "user equivalence (ssh)", we don't know whether other items can be passed or not because CVU cannot proceed to check the machines.
My question is:
How to have the script "runcluvfy.sh" continue to check the machines while confronting "user equivalence failed" ?

Result: User equivalence check failed for user "oracle".

While installing on Solaris-10, ssh, rlogin, scp works fine.
Running runcluvfy.sh stage -post hwos -n rac-1,rac-2 -verbose returns the above error.
Result: User equivalence check failed for user "oracle".
ERROR:
User equivalence unavailable on all the nodes.
Verification cannot proceed.
/bin/ssh & /bin/scp is in use.

Hello,
I am facing User equivalence check failed for user "oracle" error on my newly to be built RAC cluster.
The Oracle users have been created identically and ssh have been setup as per RAC installation manual.
Still I am facing the below problem. Please help me out
Node1 > uname -a
Linux purple-rac-node2 2.6.18-194.el5 #1 SMP Mon Mar 29 22:10:29 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux
Node2 > uname -a
Linux purple-rac-node1 2.6.18-194.el5 #1 SMP Mon Mar 29 22:10:29 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux
clusterware/cluvfy/runcluvfy.sh stage -post hwos -n purple-rac-node1,purple-rac-node2 -verbose
Performing post-checks for hardware and operating system setup
Checking node reachability...
Check: Node reachability from node "purple-rac-node1"
Destination Node                      Reachable?
purple-rac-node2                         yes
purple-rac-node1                         yes
Result: Node reachability check passed from node "purple-rac-node1".
Checking user equivalence...
Check: User equivalence for user "oracle"
Node Name                             Comment
purple-rac-node2                         failed
purple-rac-node1                         failed
Result: User equivalence check failed for user "oracle".
ERROR:
User equivalence unavailable on all the nodes.
Verification cannot proceed.
[oracle@purple-rac-node1 ~]$ id oracle
uid=501(oracle) gid=501(dba) groups=501(dba),502(oper),503(oinstall)
[oracle@purple-rac-node2 ~]$ id oracle
uid=501(oracle) gid=501(dba) groups=501(dba),502(oper),503(oinstall)

Runcluvfy.sh failed on user equivalence check for user "oracle"

I have user oracle set up on both nodes -RHEL5 as:
uid=505(oracle) gid=87(oinstall) groups=87(oinstall),88(dba)
but when run the runcluvfy.sh stage -pre crsinst -n node1,node2 -verbose
get the ERROR:
user equivalence check failed for user "oracle"
user equivalence unavailable on all the nodes.
Help appreciated!

When you test this, are you using the fully qualified domain name (FQDN) like node1.domain.com or just node1? Oracle is most likely using the FQDN, so if you did "ssh node1 date" and that worked fine, I'll bet that "ssh node1.domain.com date" will result in a prompt to authorize the host first and that's probably the issue.
I also usually ssh over the private interface as well. That is, do both of these from the node where the installer runs:
ssh node2.domain.com date
ssh node2-priv.domain.com date ### assuming that node2-priv is the name of the private network interface
Let us know if that's the issue.
Dan

Enabling SSH user equivalence resets umask to 0077

Similar Messages

Maybe you are looking for