topic Re: Integrity Virtual Machines Manager on SMH in Operating System - HP-UX

Integrity Virtual Machines Manager on SMH

Harry_IV — Fri, 10 Apr 2009 08:40:13 GMT

Hello,
I try to use SMH to manage my VMs> (Tools -> Integrity Virtual Machines Management -> Integrity Virtual Machines Manager) and see error:
"Incorrect permissions.
An error occurred communicating with WBEM: CIM_ERR_ACCESS_DENIED CIM_ERR_ACCESS_DENIED: PGS05203: THE USER 'hpsmh' IS NOT AUTHORIZED TO RUN 'EnumerateInstances' IN THE NAMESPACE 'root/cimv2/hpvm'"
What does it mean?
OS - 11.31, VM 4.0

Re: Integrity Virtual Machines Manager on SMH

Steven E. Protter — Fri, 10 Apr 2009 12:23:34 GMT

Shalom,

This kind of message usually means one of two things:
* An actuyal permissions problem in the configuration area of the VM 4.0 product.
* A patch is needed.

I'd check both out.

SEP

Re: Integrity Virtual Machines Manager on SMH

Rita C Workman — Fri, 10 Apr 2009 14:01:18 GMT

What are you trying to "manage" on those hosts?

The error msg seems to say "hpvm" is not there. Managing and running the hpvm commands in done on the VMHost. So I'm thinking you need to run commands over there.

....but my view could be tainted, because I have little to no fondness for SMH.

Just a thought,
Rita

Re: Integrity Virtual Machines Manager on SMH

Shinji Teragaito_1 — Mon, 13 Apr 2009 06:02:19 GMT

I'm not sure if the message indicates the failure for the VMMGR
configurations.

Can you describe how you configured the WBEM credentials ?
http://docs.hp.com/en/T8669-90041/ch02s05.html#set_webem_creds_smh

As for me, after installing VMMGR on a VM Host, I tried to
configure the valid user credentials for 2 VM guests respectively
at "Per-VM user name and password". After pressing the OK button,
I can access to the VM Manager view such as Figure 3-6.
http://docs.hp.com/en/T8669-90041/ch03s02.html

Re: Integrity Virtual Machines Manager on SMH

Harry_IV — Tue, 21 Apr 2009 09:54:20 GMT

it VM host. VMM is working only in SIM
VMM is not working using SMH on VM host.
.....
WBEM credentials on VM host is ok:
checking for WBEM support on system.
This system has WBEM protocol support
This system has at least one SMI-S CIMOM installed
This system has a server CIMOM installed
Running WBEM rules based identification.
Got ComputerSystem WBEM/WMI data from the system
.....

Re: Integrity Virtual Machines Manager on SMH

Harry_IV — Tue, 21 Apr 2009 11:04:53 GMT

The problem is solved if:
cimconfig -s \ enableNamespaceAuthorization=false -p

If enableNamespaceAuthorization=true
VMM is not working on SMH
Why?

Re: Integrity Virtual Machines Manager on SMH

Shinji Teragaito_1 — Wed, 22 Apr 2009 23:16:31 GMT

Can you show the output for "cimconfig -l -p" ?

I guess enableSubscriptionsForNonprivilegedUsers is true in your
configuration.

The enableNamespaceAuthorization property is false as default. I
don't understand why your system had
enableNamespaceAuthorization=true. Anyway, The default, false,
means that users are authorized across all namespaces. If
enableNamespaceAuthorization is set to true, you must authorize
each user, namespace by namespace, with the cimauth command.

In your case, I guess you specified "hpsmh" user in the WBEM
credentials page I presented in my previous message.

As for me, I'm using the default configurations for cimconfig on
HPVM 4.1 host running on 11.31 0903.

# cimconfig -l -p
enableAuditLog=false
sslClientVerificationMode=disabled
idleConnectionTimeout=0
enableSubscriptionsForNonprivilegedUsers=false
shutdownTimeout=30
authorizedUserGroups=
enableRemotePrivilegedUserAccess=true
enableHttpsConnection=true
enableNamespaceAuthorization=false
enableHttpConnection=false
#

I specified "root" user in the WBEM credentials page for each VM
guests. I have never encountered your problem when accessing VM
Manager through HP SMH.

Re: Integrity Virtual Machines Manager on SMH

Harry_IV — Tue, 28 Apr 2009 08:17:09 GMT

I am using "cimauth user" (login simuser)
1. First of all, I use cimauth commands:
cimauth -a -u simuser \
-n root/cimv2 -R -W
cimauth -a -u simuser \
-n root/PG_InterOp -R -W
cimauth -a -u simuser \
-n root/PG_Internal -R -W
2. second check rights for namespaces
cimauth -l
simuser, root/cimv2, "rw"
simuser, root/PG_InterOp, "rw"
simuser, root/PG_Internal, "rw"
3. I use user named simuser for WBEM credentials.
# cimconfig -l -p
enableAuditLog=false
sslClientVerificationMode=optional
idleConnectionTimeout=0
enableSubscriptionsForNonprivilegedUsers=true
shutdownTimeout=30
authorizedUserGroups=
enableRemotePrivilegedUserAccess=true
enableHttpsConnection=true
enableNamespaceAuthorization=true
enableHttpConnection=false

Re: Integrity Virtual Machines Manager on SMH

Shinji Teragaito_1 — Tue, 28 Apr 2009 11:03:34 GMT

What happens if simuser is allowed to access the namespace "root/cimv2/hpvm" ?

# cimauth -a -u simuser -n root/cimv2/hpvm -R -W
# cimconfig -s enableNameSpaceAuthorization=true -p

Re: Integrity Virtual Machines Manager on SMH

Harry_IV — Tue, 28 Apr 2009 12:41:03 GMT

Ok.I added rights to namespace "root/cimv2/hpvm" for user simuser. But why VMM try automaticaly to use user hpsmh?
Hot to change during logon from user hpsmh to simuser?

Re: Integrity Virtual Machines Manager on SMH

Dsmit — Fri, 03 Jul 2009 07:47:05 GMT

The problem will be solved if you add the following to the CIM namespace authorisartions

#cimauth -a -u hpsmh -n root/cimv2/hpvm

Rgds
Denis

Re: Integrity Virtual Machines Manager on SMH

MahboobEllath — Fri, 29 Apr 2016 06:32:37 GMT

This solution will partially solve the problem, but still you may get same error for some other option of SMH. So, for the complete resolution we need to provide read-write access to hpsmh user for the namespace root/cimv2/hpvm

Use below command if you are adding for the fist time.

# cimauth -a -u hpsmh -n root/cimv2/hpvm -R -W

use below command to modify the acees if you have already added the same

# cimauth -m -u hpsmh -n root/cimv2/hpvm -R -W

# cimauth -l --> to check status