You should already have reviewed Section 16.2, Planning the WebAccess Agent in a Linux Cluster and filled out Section 16.6, WebAccess Agent Clustering Worksheet. You are now ready to complete the following tasks to set up the WebAccess Agent in a clustering environment:
The WebAccess Agent domain will be a secondary domain. To create it, follow the instructions in Section 14.2, Creating a New Secondary Domain in a Linux Cluster, taking your information from the WebAccess Agent Clustering Worksheet, rather than the System Clustering Worksheet, then return to this point.
Do not create any post offices in the WebAccess Agent domain.
After you have created the domain, continue with Installing the MTA for the WebAccess Agent Domain.
The MTA for the WebAccess Agent domain can be installed just like any other MTA in your clustered GroupWise system. Follow the instructions in Section 14.4.1, Installing and Setting Up the Agents in Your Cluster, then return to this point.
You do not need to edit the MTA startup file. You do not need to modify the Cluster Resource object properties until after you have installed the WebAccess Agent.
After you have installed the MTA, continue with Installing and Configuring the WebAccess Agent in a Cluster.
After you have created a domain for the WebAccess Agent and installed the MTA for that domain, you are ready to install and configure the WebAccess Agent.
The WebAccess Agent must be installed on each node in its failover list (WebAccess Agent Clustering Worksheet item 3).
Make sure that the WebAccess Agent software is available in the software distribution directory you created in Step 6 in Section 14.1, Setting Up a New GroupWise System in a Linux Cluster.
Mount the WebAccess Agent partition (WebAccess Agent Clustering Worksheet item 1) where the WebAccess Agent message queues are located.
From the software distribution directory, start the GroupWise Installation program and select
.Install the WebAccess Agent software, following the steps provided in Installing the Linux WebAccess Agent
in Installing GroupWise WebAccess
in the GroupWise 8 Installation Guide.
Configure the WebAccess Agent according to the GroupWise WebAccess Installation Summary Sheets
that you filled out in Section 16.2, Planning the WebAccess Agent in a Linux Cluster, paying special attention to the cluster resource information on the Server Information page.
As a result of selecting
on the preferred node, the following cluster-specific configuration actions are performed:The WebAccess Agent startup file (webac80a.waa) is created in mount_point/groupwise/agents/share on the shared resource so that the WebAccess Agent uses the same startup file regardless of which cluster node it is running on. The --home switch includes the mount point and the path to the database so that the startup file is valid when mounted to each cluster node.
If this is the first GroupWise agent installed on this cluster node, the GroupWise High Availability service is automatically configured and its configuration file (gwha.conf) is created in the /etc/opt/novell/groupwise directory. If another GroupWise agent has already been installed on this cluster node, the gwha.conf file is updated to include the WebAccess Agent.
The clusterimport.conf file in the gwinst subdirectory of the software distribution directory from which you ran the GroupWise Installation program is updated, so that the cluster-specific information collected when you configured the WebAccess Agent on the preferred node is available when you install the WebAccess Agent on subsequent nodes.
The WebAccess Agent is not configured to start automatically on system startup. In a cluster, you do not want the WebAccess Agent to start automatically whenever a node restarts.
Continue with Running the WebAccess Agent Installation Program on Subsequent Nodes.
On the next node in the WebAccess Agent failover list, mount the WebAccess Agent partition (WebAccess Agent Clustering Worksheet item 1) where the WebAccess Agent message queues are located.
From the software distribution directory you created in Step 6 in Section 14.1, Setting Up a New GroupWise System in a Linux Cluster, start the GroupWise Installation program and select .
Because of the existence of the clusterimport.conf file in the gwinst subdirectory of the software distribution directory, a new installation option, , is now available on the main GroupWise Installation program page.
Install the WebAccess Agent software on the cluster node as usual, but do not use the
option.On the main page of the Installation program, click
, then click .All GroupWise agents that you have installed from the software distribution directory are listed, based on the information stored in the clusterimport.conf file.
Select the GroupWise agents that you want to configure on the current cluster node, then click
.The
option performs the following configuration actions for each subsequent node where you run it:The grpwise script is created in the /etc/init.d directory on the current cluster node. It is configured specifically for the agents you just selected.
The GroupWise High Availability service is automatically configured on the current cluster node and its configuration file (gwha.conf) is created in the /etc/opt/novell/groupwise directory. It is configured specifically for the agents you just selected.
Because the agent startup files and log files are stored on the shared resource, they do not need to be customized for each cluster node.
Repeat Step 1 through Step 5 for each cluster node in the WebAccess Agent failover list.
After you install and configure the WebAccess Agent on each node in its failover list, the cluster node is ready for the WebAccess Agent to fail over to it.
Continue with Testing Your WebAccess Agent Installation on Each Node.
Test the WebAccess Agent by starting it with a user interface, as described in Starting the Linux WebAccess Agent
in Installing GroupWise WebAccess
in the GroupWise 8 Installation Guide.
/opt/novell/groupwise/agents/bin/gwinter --show @webac80a.waa &
Stop the WebAccess Agent by closing the window that it is running in.
After you can see that the WebAccess Agent stopped successfully, test it by starting it as a daemon, as described in Starting the Linux GroupWise Agents as Daemons
in Installing GroupWise Agents
in the GroupWise 8 Installation Guide.
/etc/inet.d/grpwise start webac80a /etc/inet.d/grpwise status webac80a
Stop the WebAccess Agent.
/etc/inet.d/grpwise stop webac80a /etc/inet.d/grpwise status webac80a
Repeat Step 1 through Step 4for each node in the WebAccess Agent failover list.
Continue with Configuring Clustered Logging
The default location for the WebAccess Agent log files is on the cluster nodes along with the WebAccess Agent software, rather than being located with the domain on the WebAccess Agent partition. To avoid having multiple copies of log files in multiple locations, you should set the location in ConsoleOne.
On the WebAccess Agent partition where the domain is located, create the directory where you want to store WebAccess Agent log files.
In ConsoleOne, browse to and select the Domain object.
Right-click the WebAccess Agent object, then click
.Click
.In the Step 1, then click .
field, browse to and select the directory you created inIf you want the WebAccess Agent to use SSL connections, continue with Configuring the Clustered WebAccess Agent for SSL
or
Skip to Configuring the WebAccess Agent Cluster Resource to Load and Unload the WebAccess Agent and Its MTA.
If you plan to enable SSL, as described in Securing WebAccess Agent Connections with SSL
in WebAccess
in the GroupWise 8 Administration Guide, you need to make the SSL certification file and key file available to the WebAccess Agent in the cluster. The default locations for the SSL certificate file and key file are on the cluster nodes along with the WebAccess Agent software, rather than being located with the domain on a GroupWise partition. To avoid having multiple copies of these files in multiple locations, you should set the locations in ConsoleOne.
On the WebAccess Agent partition, create the directory where you want to store the certificate and key file required for SSL.
Copy the certificate file and key file into the new directory.
If you need assistance obtaining these files, see Server Certificates and SSL Encryption
in Security Administration
in the GroupWise 8 Administration Guide.
In ConsoleOne, browse to and select the Domain object.
Right-click the WebAccess Agent object, then click
.Click
.In the
field, browse to and select the certificate file.In the
field, browse to and select the key file.Click
.After you have set these locations to the WebAccess Agent partition, continue with Configuring the WebAccess Agent Cluster Resource to Load and Unload the WebAccess Agent and Its MTA.
The properties of the Cluster Resource object define how the WebAccess Agent partition functions within the cluster, how the WebAccess Agent is loaded and unloaded, and how failover and failback situations are handled. Complete the following tasks for the WebAccess Agent cluster resource:
The cluster resource load script executes whenever the WebAccess Agent cluster resource comes online.
To set up the load script in iManager:
Expand Clusters, then click
.In the
field, browse to the Cluster object where the WebAccess Agent cluster resource is located.Click the Cluster object to display the cluster resources that belong to the cluster.
Select the WebAccess Agent cluster resource that you created when you set up the WebAccess Agent partition, then click
.The default load script from a generic IP service template appears as follows:
#!/bin/bash . /opt/novell/ncs/lib/ncsfuncs # mount the file system exit_on_error mount -t reiserfs /dev/evms/vol /mnt/generic # add the IP address exit_on_error add_secondary_ipaddress a.b.c.d # start the service exit_on_error /etc/init.d/myservice start # return status exit 0
If this is an NSS volume or a shared pool, make the following changes to set up the WebAccess Agent load script:
As needed, in the mount command, change reiserfs to whatever file system type is in use on nodes in the cluster.
In the mount command, change vol to the actual device name in use on nodes in the cluster.
In the mount command, change /mnt/generic to the mount point directory in use on nodes in the cluster.
In the add_secondary_ipaddress command, change a.b.c.d to the secondary IP address of the WebAccess Agent partition (WebAccess Agent Clustering Worksheet item 1)
In the start service command, change myservice start to the command to start the WebAccess Agent and its MTA.
/etc/init.d/grpwise start domain /etc/init.d/grpwise start webac80a
If this is a traditional Linux volume, use the following load script:
#! /bin/bash . /opt/novell/ncs/lib/ncsfunc # define the IP address RESOURCE_IP=123.123.1. # define the file system type MOUNT_FS=reiserf # define the device exit_on_error evms -f /var/opt/novell/ncs/ContainerActivate -rl Share ‘uname -n‘ MOUNT_DEV=/dev/evms/Share/dat # define the mount point MOUNT_POINT=/mnt/mount_point # mount the file system exit_on_error mount -t $MOUNT_FS $MOUNT_DEV $MOUNT_POINT # add the IP address exit_on_error add_secondary_ipaddress $RESOURCE_IP /etc/init.d/grpwise start domain /etc/init.d/grpwise start domain.webac80a exit 0
Make the following changes to set up the load script for the agents:
On the RESOURCE_IP line, change 123.123.1.1 to the secondary IP address of the GroupWise partition (WebAccess Agent Clustering Worksheet item 1)
As needed on the MOUNT_FS line, change reiserfs to whatever file system type is in use on nodes in the cluster.
On the MOUNT_DEV line, change /dev/evms/Share/dat to the actual device name in use on nodes in the cluster.
On the MOUNT_POINT line, change /mnt/mount_point to the mount point directory in use on nodes in the cluster.
Use the following command to start the MTA:
/etc/init.d/grpwise start domain
Use the following command to start the WebAccess Agent:
/etc/init.d/grpwise start domain.webac80a.
Click
to save the load script.The cluster resource unload script executes whenever the WebAccess Agent cluster resource goes offline. Programs should be unloaded in the reverse order of how they were loaded. This ensures that supporting programs are not unloaded before programs that rely on them in order to function properly.
On the Cluster Resource Properties page of the WebAccess Agent cluster resource, click
.The default unload script appears as follows:
#!/bin/bash . /opt/novell/ncs/lib/ncsfuncs # request service stop ignore_error /etc/init.d/myservice stop # stop service otherwise sleep 8 ignore_error fuser -k /mnt/generic # del the IP address ignore_error del_secondary_ipaddress a.b.c.d # umount the file system exit_on_error umount /mnt/generic # return status exit 0
If this is an NSS volume or a shared pool, make the following changes:
In the request service stop section, change myservice stop to the command to stop the WebAccess Agent and its MTA.
/etc/init.d/grpwise stop webac80a /etc/init.d/grpwise stop domain
In the stop service otherwise section (used if the agents do not stop normally), remove these commands:
sleep 8 ignore_error fuser -k /mnt/generic
Use these commands instead to stop the WebAccess Agent and its MTA:
ignore_error /etc/init.d/grpwise stop webac80a ignore_error /etc/init.d/grpwise stop domain sleep 8 ignore_error pkill -fx "/opt/novell/groupwise/agents/bin/gwinter @/webac80a.waa" ignore_error pkill -fx "/opt/novell/groupwise/agents/bin/gwmta @/path_to_startup_file/domain.mta"
In the del IP address section, change a.b.c.d to the secondary IP address used in the load script.
In the umount file system section, change /mnt/generic to the mount point directory used in the load script.
If this is a traditional Linux volume, use the following unload script:
#!/bin/bash . /opt/novell/ncs/lib/ncsfuncs /etc/init.d/grpwise stop domain.webac80a /etc/init.d/grpwise stop domain # define the IP address RESOURCE_IP=172.16.5.18 # define the mount point MOUNT_POINT=/mnt/mount_point sleep 8 ignore_error fuser -k $MOUNT_POINT # del IP the address ignore_error del_secondary_ipaddress $RESOURCE_IP # umount the file system exit_on_error umount $MOUNT_POINT # return status exit 0
Make the following changes to set up the unload script for the agents.
Use the following command to stop the WebAccess Agent:
/etc/init.d/grpwise stop domain.webac80a
Use the following command to stop the MTA:
/etc/init.d/grpwise stop domain
On the RESOURCE_IP line, change 172.16.5.18 to the secondary IP address used in the load script.
On the MOUNT_POINT line, change /mnt/mount_point to the mount point directory used in the load script.
Adjust the sleep command as needed so that the agents can shut down normally on your system without being inadvertently killed. by the fuser -k command that follows.
In the fuser -k command (used if the agents do not stop normally), change -k to -mk.
The -m parameter obtains the PID numbers of the processes to kill.
Click
to save the unload script.On the Cluster Resource Properties page of the WebAccess Agent cluster resource, click
.The default policy settings are often appropriate. By default, a cluster resource:
Fails over automatically if the node it is running on fails
Starts automatically on the next node in its failover list
Continues running at its failover location, even after its most preferred node is again available
If you are considering changing these defaults, see the OES 11 Novell Cluster Services 2 for Linux Administration Guide .
Click
.During installation of the WebAccess Agent, the WebAccess Agent object should have been configured correctly. However, it can be helpful to verify certain cluster-specific information in order to familiarize yourself with the configuration of a clustered WebAccess Agent.
In ConsoleOne, browse to and select the WebAccess Agent domain in order to display its contents.
Right-click the WebAccess Agent object, then click
.Continue with Verifying Post Office Links.
In the WebAccess object properties pages:
Click
.Verify that the
column displays (for client/server mode) for all post offices serviced by the WebAccess Agent.Verify that the GroupWise partitions where post offices reside, not the IP addresses of any nodes in the cluster.
column displays the secondary IP addresses of theMake changes if necessary.
Continue with Forcing Use of the Web Access Agent Secondary IP Address.
If you want the WebAccess Agent to always use its secondary IP address, rather than using the primary IP address:
Click
.In the WebAccess Agent Clustering Worksheet item 1) for the Internet Agent.
field, provide the secondary IP address (Select
.Click
.Continue with Testing the WebAccess Agent in a Linux Cluster.
If you have clustered your Web server, you must install the WebAccess Application on each node where the Web server is installed, as described in Installing the WebAccess Application and WebPublisher Application
in Installing GroupWise WebAccess
in the GroupWise 8 Installation Guide.