topic Re: HP SMH in Operating System - HP-UX

HP SMH

christian_derek — Wed, 23 Feb 2011 02:58:00 GMT

Hi,

I am planning the cut over of my old integrity server. Both of them run 11iv3, I have copied over the group, passwd and shadow files. When I tried to run HP SMH, it does not work anymore, if I restore the original file, it's working.

What do I need to do to make it work after the copy of the file?

Thanks,

Re: HP SMH

christian_derek — Wed, 23 Feb 2011 03:28:59 GMT

I forgot to mention the error message,

1)at the web pages, I am getting ...

ERROR: Username and password do not match

2)in the syslog file

syslog: SMH: User:root from 192.x.x.x was DENIED access to System Management Homepage

3) in the smh.log

nothing

thanks,

Re: HP SMH

nijokj — Wed, 23 Feb 2011 06:22:38 GMT

you please try after resetting the password of root.
and run pwck and grpck command to check the consistency on passwd and group file.

Re: HP SMH

INH — Thu, 24 Feb 2011 01:22:31 GMT

Hi

Check the root password and possibly u need to change it post copy

Regds,
INH

Re: HP SMH

Shibin_2 — Thu, 24 Feb 2011 03:05:34 GMT

>> I have copied over the group, passwd and shadow files.

Have your run consistency checks after copying these files? Have you validate your root user authentication before trying through SMH ?

Re: HP SMH

christian_derek — Thu, 24 Feb 2011 06:10:50 GMT

Yes, the password of root is working at the os level, but i realised that my default user don't have the same userid, so the hpsmh is wrong.

What is the best way to handle that, sync the password on the new target platform?

Thanks

Re: HP SMH

Hakki Aydin Ucar — Thu, 24 Feb 2011 06:42:26 GMT

>Christian : if I restore the original file, it's working.

What did you mean exactly with the original file ?
if you use any new user ,is it working via SMH ?

Re: HP SMH

christian_derek — Thu, 24 Feb 2011 13:33:28 GMT

I kept a copy of the group, passwd and shadow file, when i copied them back it was working.

I compare them and find out that the userid of few user was not the same.

Thanks

Re: HP SMH

Ismail Azad — Thu, 24 Feb 2011 13:55:36 GMT

Hi christian,

Ok... so you can login on to the O.S as root but not onto SMH as root. So that probably has something to do with "restricting SMH access".

Since the other server is new and you are planning a "transfer", it is possible for security reasons, SMH itself has been blocked... Just a thought...

Please post output of smhstartconfig... And if disabled execute

smhstartconfig -a on -b off

By default only root users are allowed access to SMH so... try the above.... Let us know..

Regards
Ismail Azad

Re: HP SMH

christian_derek — Thu, 24 Feb 2011 14:16:28 GMT

The issue is related with userid, since the hpsmh have a different one on the old system, when the file are copied over (passwd,group and shadow). The hpsmh is not owning some critical files...

Thanks

Re: HP SMH

Ismail Azad — Thu, 24 Feb 2011 14:34:10 GMT

Hi christian derek,

The hpsmh "user account" is a system account also known as a "pseudo account" used for supporting subsystems, in this case the hpsmh subsystem as a whole and the UID of pseudo accounts are very much critical for supporting the subsystem in this case hpsmh. Although HPUX has a reserved range of 0-99, in most of the servers I have seen hpsmh has a UID a little above 100. A change in the system account will hamper the subsystem in this case SMH.

I say this because you have mentioned...

> since the hpsmh have a different one on the old system,

And by that I think you mean the 'hpsmh account' on /etc/passwd... Is it possible to make that as it was on the server you are transferring it from or is that UID is not free? {although I have never touched a system account}? But it's puzzling why you have the 'hpsmh pseudo account' having a different UID on both servers... Hope info helps.

Regards
Ismail Azad

Re: HP SMH

nijokj — Thu, 24 Feb 2011 14:50:02 GMT

try change the userid of the user hpsmh. Keep the same user id of the original user having.