SUSE12SP2-HAE搭建詳細(xì)教程

安裝配置HAE網(wǎng)絡(luò)規(guī)劃設(shè)備名類型IP規(guī)劃備注Erpprd01Erpprd02Eth0以太網(wǎng)Node1:61Node2:62集群心跳IPEth1以太網(wǎng)Node1:1Node2:2業(yè)務(wù)網(wǎng)段IPerpprd業(yè)務(wù)網(wǎng)口VIP0業(yè)務(wù)網(wǎng)VIP，SAP業(yè)務(wù)訪問浮動(dòng)IP檢查OS版本#cat/etc/issue檢查內(nèi)存#cat/proc/meminfo|grep-i"memtotal"檢查cpu#cat/proc/cpuinfo|grep"processor"|wc–l檢查swap#cat/proc/swaps檢查文件系統(tǒng)#df-h檢查umask#umask檢查uuidd#rpm–qa|grepuuidd設(shè)置NetworkIP操作系統(tǒng)使用yast2配置網(wǎng)口參考指導(dǎo)如下：以root用戶登錄服務(wù)器，執(zhí)行”yast2”,選擇“networkDevices”,選擇“NetworkSettings”如下圖所示：設(shè)置“eth0”業(yè)務(wù)網(wǎng)段設(shè)置“eth1”心跳網(wǎng)段 設(shè)置HOSTNAME/DNS 設(shè)置網(wǎng)關(guān) 按照上述操作，完成node2服務(wù)器的網(wǎng)絡(luò)設(shè)置。修改主機(jī)host文件編輯hosts文件，同步node1和node2hosts2文件，如下圖：NTP客戶端配置HA集群中兩臺(tái)HANA服務(wù)器都需要分別配置NTP客戶端，實(shí)現(xiàn)和NTP服務(wù)器時(shí)間同步。以root用戶登錄第一個(gè)服務(wù)器節(jié)點(diǎn)；執(zhí)行下面命令“chkconfigntpon”設(shè)置NTP自啟動(dòng)：#chkconfigntpdon執(zhí)行“#vi/etc/ntp.conf”命令編輯NTP配置文件ntp.conf。#vi/etc/ntp.conf按“i”，將vi編輯器切換至插入模式。插入內(nèi)容：server<NTP服務(wù)器的IP地址>。本指導(dǎo)書以53地址為例，請根據(jù)用戶實(shí)際的NTP服務(wù)器地址進(jìn)行替換；server53按“ESC”，將vi編輯器切換至命令行模式。按“：”，將vi編輯器切換至底行模式，輸入wq!，按“Enter”，保存修改并退出vi編輯器。執(zhí)行命令“servicentprestart”重啟NTP服務(wù)#servicentpdrestart執(zhí)行命令“ntpq-p”查看NTP運(yùn)行狀態(tài)。#ntpq-p顯示結(jié)果主要參數(shù)說明：remote：響應(yīng)這個(gè)請求的NTP服務(wù)器的名稱。when:上一次成功請求之后到現(xiàn)在的秒數(shù)。poll:本地機(jī)和遠(yuǎn)程服務(wù)器多少時(shí)間進(jìn)行一次同步(單位為秒)。offset：主機(jī)通過NTP時(shí)鐘同步與所同步時(shí)間源的時(shí)間偏移量，單位為毫秒（ms）。配置時(shí)間同步間隔：執(zhí)行命令“crontab-e”進(jìn)入VI編輯;輸入“i”進(jìn)入插入模式；增加下面語句*/15****/usr/sbin/rcntpntptimeset&>/dev/null;/sbin/hwclock-w按“ESC”，將vi編輯器切換至命令行模式；按“：”，將vi編輯器切換至底行模式，輸入wq，按“Enter”，保存修改并退出vi編輯器。重啟服務(wù)：執(zhí)行命令“/etc/init.d/cronrestart”結(jié)束本節(jié)點(diǎn)的NTP配置/etc/init.d/cronrestart登錄第二個(gè)HANA服務(wù)器節(jié)點(diǎn)，重復(fù)上面步驟配置NTP服務(wù)器；SSH免密碼互聯(lián)服務(wù)配置HA集群的兩臺(tái)服務(wù)器的需要配置SSH免密碼互聯(lián)服務(wù)，執(zhí)行過程如下：生成認(rèn)證公鑰分別在兩個(gè)服務(wù)器上面執(zhí)行依次執(zhí)行：登錄服務(wù)器節(jié)點(diǎn)1分別執(zhí)行命令“ssh-keygen-trsa”；“ssh-keygen-tdsa”生成公鑰；執(zhí)行過程參考如下：erpprd01:#ssh-keygen-trsaGeneratingpublic/privatersakeypair.Enterfileinwhichtosavethekey(/root/.ssh/id_rsa):Createddirectory'/root/.ssh'.Enterpassphrase(emptyfornopassphrase):（默認(rèn)，直接回車）Entersamepassphraseagain:（默認(rèn)，直接回車）Youridentificationhasbeensavedin/root/.ssh/id_rsa.Yourpublickeyhasbeensavedin/root/.ssh/id_rsa.pub.Thekeyfingerprintis:b9:67:bb:07:06:8b:20:1b:3a:a4:2e:ed:e3:d7:58:54[MD5]root@erpprd01Thekey'srandomartimageis:+--[RSA2048]----+|||E||.||.o....||o.+o.So||+.o..o||.o+..o.||..oo.o..||.ooooo|+--[MD5]----------+登錄服務(wù)器節(jié)點(diǎn)2同樣分別執(zhí)行命令“ssh-keygen-trsa”；“ssh-keygen-tdsa”生成公鑰；復(fù)制認(rèn)證公鑰依次執(zhí)行下面把產(chǎn)生的公鑰復(fù)制到另外一臺(tái)機(jī)器在服務(wù)器節(jié)點(diǎn)1依次執(zhí)行下面命令復(fù)制公鑰到對方節(jié)點(diǎn)；提示輸入節(jié)點(diǎn)密碼時(shí)輸入root用戶密碼；執(zhí)行該命令必須先完成/etc/hosts文件編輯，實(shí)現(xiàn)主機(jī)名到IP地址的解析；ssherpprd01"echo$(cat/root/.ssh/id_dsa.pub)>>/root/.ssh/authorized_keys"sshsrmapp2"echo$(cat/root/.ssh/id_dsa.pub)>>/root/.ssh/authorized_keys"ssherpprd01"echo$(cat/root/.ssh/id_rsa.pub)>>/root/.ssh/authorized_keys"sshsrmapp2"echo$(cat/root/.ssh/id_rsa.pub)>>/root/.ssh/authorized_keys"打印參考如下：登錄服務(wù)器節(jié)點(diǎn)2，參考服務(wù)器節(jié)點(diǎn)1的方法，依次執(zhí)行下面命令復(fù)制公鑰到對方節(jié)點(diǎn)；ssherpprd01"echo$(cat/root/.ssh/id_dsa.pub)>>/root/.ssh/authorized_keys"sshsrmapp2"echo$(cat/root/.ssh/id_dsa.pub)>>/root/.ssh/authorized_keys"ssherpprd01"echo$(cat/root/.ssh/id_rsa.pub)>>/root/.ssh/authorized_keys"sshsrmapp2"echo$(cat/root/.ssh/id_rsa.pub)>>/root/.ssh/authorized_keys"驗(yàn)證配置結(jié)果SSH免密碼互聯(lián)驗(yàn)證方法：分別在兩個(gè)節(jié)點(diǎn)上，使用SSH登錄另外一個(gè)節(jié)點(diǎn)，如果不需要密碼登錄，則說明互信已經(jīng)建立；登錄服務(wù)器節(jié)點(diǎn)1，運(yùn)行“sshsrmapp2”，應(yīng)該可以直接登錄到節(jié)點(diǎn)2，不需要輸入密碼；在服務(wù)器節(jié)點(diǎn)2，運(yùn)行“ssherpprd01”，應(yīng)該可以直接登錄到節(jié)點(diǎn)1，不需要輸入密碼；Suse11SP3Cluster組件安裝兩臺(tái)HANA集群的服務(wù)器，需要分別安裝Cluster組件安裝Suse11SP3Cluster組件；服務(wù)器節(jié)點(diǎn)1安裝；掛載ISO文件：通過BMC的KVM把Suse12SP2ForSAP的ISO文件掛載入Suse12的OS中；在桌面點(diǎn)擊鼠標(biāo)右鍵，打開一個(gè)“Terminal”，輸入yast2命令，打開管理界面；選擇左邊“software”項(xiàng)，并且在右邊項(xiàng)中選擇“Add-OnProducts”；登錄HA服務(wù)器節(jié)點(diǎn)2，參考上面步驟1~6；在服務(wù)器節(jié)點(diǎn)2，安裝clusterHA組件；2.14Suse11SAPClusterHA配置主節(jié)點(diǎn)初始化HA集群在HA集群服務(wù)器節(jié)點(diǎn)1上運(yùn)行Suse12Cluster的命令進(jìn)行集群的初始化，在進(jìn)行集群初始化前需要配置SSH互信連接和NTP。以root用戶登錄服務(wù)器節(jié)點(diǎn)1(配置為主節(jié)點(diǎn))，執(zhí)行命令“ha-cluster-init”，進(jìn)行初始化；執(zhí)行過程中根據(jù)下面提示選擇打印提示完成，記住登錄用戶為“hacluster”密碼為“l(fā)inux”打印參考如下：Erpprd01:~#ha-cluster-initEnablingsshdservice/root/.ssh/id_rsaalreadyexists-overwrite?[y/N]N(輸入N,不覆蓋）GeneratingsshkeyConfiguringcsync2Generatingcsync2sharedkey(thismaytakeawhile)...doneEnablingcsync2serviceEnablingxinetdservicecsync2checkingfilesConfigureCorosync:Thiswillconfiguretheclustermessaginglayer.Youwillneedtospecifyanetworkaddressoverwhichtocommunicate(defaultiseth0'snetwork,butyoucanusethenetworkaddressofanyactiveinterface),amulticastaddressandmulticastport.Networkaddresstobindto(e.g.:)[](輸入本機(jī)OS維護(hù)網(wǎng)段)Multicastaddress(e.g.:239.x.x.x)[09](默認(rèn)不修改，回車）Multicastport[5405](默認(rèn)不修改，回車）ConfigureSBD:Ifyouhavesharedstorage,forexampleaSANoriSCSItarget,youcanuseitavoidsplit-brainscenariosbyconfiguringSBD.Thisrequiresa1MBpartition,accessibletoallnodesinthecluster.Thedevicepathmustbepersistentandconsistentacrossallnodesinthecluster,so/dev/disk/by-id/*devicesareagoodchoice.Notethatalldataonthepartitionyouspecifyherewillbedestroyed.DoyouwishtouseSBD?[y/N]N（不使用SBD模式）WARNING:NotconfiguringSBD-STONITHwillbedisabled.EnablinghawkserviceHAWebKonsoleisnowrunning,toseeclusterstatusgoto:67:7630/Loginwithusername'hacluster',password'linux'WARNING:Youshouldchangethehaclusterpasswordtosomethingmoresecure!EnablingopenaisserviceWaitingforcluster.......doneLoadinginitialconfigurationDone(logsavedto/var/log/sleha-bootstrap.log)備節(jié)點(diǎn)加入集群在HA集群服務(wù)器備節(jié)點(diǎn)上，運(yùn)行Suse11Cluster的命令加入現(xiàn)有的集群中；以root用戶登錄HA集群備節(jié)點(diǎn)，運(yùn)行命令“ha-cluster-join”參考打印如下：Erpprd02:~#ha-cluster-joinJoinThisNodetoCluster:YouwillbeaskedfortheIPaddressofanexistingnode,fromwhichconfigurationwillbecopied.Ifyouhavenotalreadyconfiguredpasswordlesssshbetweennodes,youwillbepromptedfortherootpasswordoftheexistingnode.IPaddressorhostnameofexistingnode(e.g.:)[]61Enablingsshdservice/root/.ssh/id_rsaalreadyexists-overwrite?[y/N]NConfiguringcsync2Theauthenticityofhost'67(67)'can'tbeestablished.ECDSAkeyfingerprintisf3:5c:6a:c8:ff:12:9d:7a:e4:22:5b:8e:9e:a9:0f:57[MD5].Areyousureyouwanttocontinueconnecting(yes/no)?yesEnablingcsync2serviceEnablingxinetdserviceMergingknown_hostsProbingfornewpartitions......doneEnablinghawkserviceHAWebKonsoleisnowrunning,toseeclusterstatusgoto:68:7630/Loginwithusername'hacluster',password'linux'WARNING:Youshouldchangethehaclusterpasswordtosomethingmoresecure!EnablingopenaisserviceWaitingforcluster.......doneDone(logsavedto/var/log/sleha-bootstrap.log)Youhavemailin/var/mail/root備注：如果提示安裝失?。骸癢ARNING:csync2of/etc/csync2/csync2.cfgfailed-filemaynotbeinsynconallnodes；”則需要在主節(jié)點(diǎn)運(yùn)行命令“scp/etc/csync2/csync2.cfgsrmapp2:/etc/csync2/”，手動(dòng)把主節(jié)點(diǎn)文件“csync2.cfg”同步到備節(jié)點(diǎn)；然后重新執(zhí)行命令“sleha-join”。修改集群密碼Erprpd01:~#passwdhaclusterChangingpasswordforhacluster.NewPassword:ReenterNewPassword:Passwordchanged.登陸“Hawk”，查看集群狀態(tài)，用戶：hacluster密碼linuxurl：1:7630或者通過crm_mon觀察創(chuàng)建共享盤登錄Vmware對erpprd01和erpprd02劃分一塊100g的共享盤（iscs