topic Re: Insufficient Privileges with Command View 7.0 in HPE EVA Storage

Insufficient Privileges with Command View 7.0

KeirL — Sat, 23 Feb 2008 18:14:21 GMT

Hi all
I have command view 7.0 installed on a windows DC and it worked fine. I then decided to upgrade to 7.0.1 but then found that when I attempted to log in I can't. From the login screen it just says 'Insufficient Privileges' for all the accounts I have in the HP Storage Admins group. Even new users I've created and added to the group say the same. I'm sure this is to do with the fact that the CV server is also a Windows Domain Controller, but all thie things I've played around within AD haven't helped. To make matters worse I've now tried un-installing CV7.0.1 and re-installed CV7.0, but this too now tells me I have insufficent privileges.
I have CV installed on another windows server (not a DC) and that's fine,
Has anyone seen this before and can suggest a fix. Is CV actually supported on DC's?

Thanks
K

Re: Insufficient Privileges with Command View 7.0

Rob Leadbeater — Sun, 24 Feb 2008 08:25:15 GMT

Hi,

I've not used 7.0, but in 6.0.2 there is a problem that makes it look as though you can't logon...

When the CV EVA webpage first loads, check to see that it has completed loading before entering your username/password. ("Done" in the bottom left hand corner on IE)

If it hasn't then you can't logon.

If the page never completely loads, then try clearing all your browser cache and/or resetting IE's security settings...

Cheers,

Rob

Re: Insufficient Privileges with Command View 7.0

KeirL — Tue, 26 Feb 2008 10:47:05 GMT

Hi
Thanks for that. I've checked it and it seems fine. The 'Done' appears in the corner as expected.
I'm convinced it's a DC thing as there aren't any 'local groups' on the Server. I also installed RSM on the box and get the exact same issue when I attempt to start the RSM server. it comes back and says I do not have the right privileges to log on.
I saw a thread that had similar issues and the author was able to get round it by moving the HP Storage Admins group into the 'Builtin' OU and assign the 'Connect from Network' right. I can move it into the OU but I can't find how to assign the 'Connect from Network' right.
Is anyone able to guide me through that bit?
Thanks again
K

Re: Insufficient Privileges with Command View 7.0

Osama Odeh_1 — Wed, 30 Apr 2008 12:16:16 GMT

I have command view 7.0 installed on a windows 2003 stand alone;and its working
fine
but after promote server to backup domain controller.
cannot login and insufficent privileges appear.
also after move Hp storage admin group to builtin group still problem exist.

also we uninstll command view 7 and its component from server and reinstall it again
but still the same problem.

Thnx

Re: Insufficient Privileges with Command View 7.0

RichardJ — Wed, 30 Apr 2008 13:13:08 GMT

I have seen this problem also and could not fix it.
Luckily the server was brand new so we ended up re-installing windows and starting from scratch.
since then I always ensure the server is on the domain and logon using the CV user account, then install CV.

I look forward to seeing a proper fix...

Re: Insufficient Privileges with Command View 7.0

Wayne Gillan — Thu, 29 May 2008 02:55:17 GMT

We also had the "insufficient privileges" issues with Command View 8.0 on a standalone 2003 server. The problem came about after we changed the host name of the server to something else. When I changed the host name back to it's original name, I was able to logon to Command View as normal. Weird...

Cheers,
Wayne

Re: Insufficient Privileges with Command View 7.0

Víctor Cespón — Wed, 16 Jul 2008 05:57:39 GMT

Hi, you cannot rename the server or join it to a domain after you have installed Command View.
This has been documented on the Command View 8.01 release notes

Login failure
Symptom: After installing HP Command View EVA 8.x/7.0.1, if you change the server name or the server setting from a local/workgroup system to a domain member/controller system or vice-versa, then subsequent login fails with insufficient privileges.
Solution: Reinstall HP Command View EVA 8.x/7.0.1 and configure the local/domain settings accordingly during installation.

Re: Insufficient Privileges with Command View 7.0

HP-UX User_1 — Fri, 19 Sep 2008 22:53:34 GMT

To fix this problem you have to go to Computer Managerment ---> Local User and Groups ---> Users. Then right click the local user account (i.e. Administraor) go to properties ---> "Member of" TAB---> Advance ---> Find Now. Then select either "HP Storage Users" or "HP Storage Admins." And you are done!!!

Have fun.

Re: Insufficient Privileges with Command View 7.0

Sajeev2007 — Tue, 23 Sep 2008 19:06:30 GMT

CV should never be on a DC
Install on a separate stand alone server

Re: Insufficient Privileges with Command View 7.0

Marschalleck — Thu, 06 Nov 2008 15:01:58 GMT

Ok, so i guess Command View runs only if the Computer is NOT a Domain Controller and has local Users/Groups.

Very funny....

Re: Insufficient Privileges with Command View 7.0

Bill Tait — Wed, 12 Nov 2008 22:40:19 GMT

Look at the following file C:\Program Files\Hewlett-Packard\Sanworks\Element Manager for StorageWorks HSV\CCBGN*-1.log. This file shows the configuration during installation of the CVA Console. Make sure the group names, domain names, host names, etc... have not changed. The HP EVA Console software will get the "Insufficient Privileges" error if there are any changes.
If you reverse any changes you made (ie:rename the host back to its original name) then you wil be able to login. If this is not possible then you have to re-install. Installing CV on a domain server is preferred. If HP installs remote support SIM on the CV server then it will need to be on the domain.

Bill

Re: Insufficient Privileges with Command View 7.0

Rob Bidwell — Wed, 10 Dec 2008 10:05:12 GMT

Well I am having a similar problem but just trying to install Command View 8 on a Windows 2003 Domain controller!!

Is it supported?

I am logged on as domain admin and the command view install fails before it even really begins saying I have insufficient privilages

Any ideas?

Re: Insufficient Privileges with Command View 7.0

Antonio Serpa Pinto — Tue, 27 Jan 2009 18:47:40 GMT

Hi all.

I had the same problem (CVE on Windows 2003 DC & Insufficient Privileges) and fixed it.

The trick is to uninstall CVE from the DC, then move the HP Storage Users and HP Storage Admins that was created by the installer in Active Directory to the "Builtin" Folder.

Afterwards, install CVE selectin "Yes, set the privileges for Domain Groups", and in the following two screens select the Domain Groups you have moved to the Builtin folder:

Domain: your_netbios_domain_name
Storage Admin Group Name: HP Storage Admins

Domain: your_netbios_domain_name
Storage Users Group Name: HP Storage Users

Should work afterwards... Good luck.
Best regards, CPCis PT.

Re: Insufficient Privileges with Command View 7.0

Christian DG Spurr — Tue, 09 Feb 2010 14:13:19 GMT

Hi,

I'm having the same problem - when I try and re-install Command View, the install process jumps past the 'security groups' option and won't allow me to select either Local or Domain privileges...

The server isn't a DC but I changed the name and added it to the domain and then these issues appeared.

I've tried creating these groups locally and in the AD but to no avail.

Thanks in advance for any help!

Christian

Re: Insufficient Privileges with Command View 7.0

Dario28 — Wed, 27 Oct 2010 12:39:55 GMT

I need to move a server from 1 domain to another with Command view running on it,

I realise that the release notes say "Login failure
Symptom: After installing HP Command View EVA 8.x/7.0.1, if you change the server name or the
server setting from a local/workgroup system to a domain member/controller system or vice-versa, then
subsequent login fails with insufficient privileges.
Solution: Reinstall HP Command View EVA 8.x/7.0.1 and configure the local/domain settings
accordingly during installation."

But does that also include domain to domain or just workgroup to domain

I have added the new domain admin accounts to the HP Storage Admins group (locally) and can log in using the new domain credential in old domain - So will the domain switch work ??

Also need to know if Replication Solutions management will work also as its on the same box.

Thanks

Re: Insufficient Privileges with Command View 8.0

Andre Stewart — Fri, 24 Aug 2012 19:18:14 GMT

I am also having this problem, but it started for me when I attempted to use the group policy editor to rename the administrator account. When it is changed, the new name belongs to all the right Groups as the actual SSID has not changed.

If I change the name back to the original name, CV works fine. Is it possible to reconfigure CV to recognize the new administrator's account name?

I am running an hp Openview Storage Management Appliance III (Windows 2000 Advanced Server SP 4) with Storage Management Appliance Software 2.1 and Command View EVA 8.0.

Re: Insufficient Privileges with Command View 8.0

Burba Viktor — Tue, 18 Jun 2013 14:34:55 GMT

Hi,

I was looking on the google for the answer for this question, and all I could find was like reinstall Command View or demote your DC, both solutions are inadequate and can be done only in test environment. So long story short I could not find anything, so I had to try to solve it myself. And here is the solution:

I had it on Win2008 which was promoted as DC, after that as expected not sufficient privileges

So after Win2008 promoted as DC, there is no more HP groups obviously, so I created just as expected two groups in AD HP Storage Admins and HP Storage Users and added desired users into this groups. No big deal so far. Then comes interesting part, what you have to do is to edit file XFSecurity.cfg in C:\Program Files (x86)\Hewlett-Packard\XF\bin\win-32. You might have only Program Files if you have 32-bit Windows or whatever your original installation path used to be. In this File find following section and change following lines with your NetBIOS domain name

Lines:

group %L, %L\HP Storage Admins, CV Storage Manager

group %L, %L\HP Storage Users, CV Storage User

change to, where PACS is your NetBIOS name

group PACS, PACS\HP Storage Admins, CV Storage Manager

group PACS, PACS\HP Storage Users, CV Storage User

So it looks like this:

Section Groups {

# syntax: group <Security Domain>, <Group Name>, <Role>

# <Security Domain> can be %L, the local host name, or a domain name. If "%L" is used, then XF will deal with host name changes automatically

# <Group Name> is the name of a security group

# <Role> a previously defined role in the "Roles" section above

# group %L, %L\HP Storage Admins, CV Storage Manager

# group %L, %L\HP Storage Users, CV Storage User

group PACS, PACS\HP Storage Admins, CV Storage Manager

group PACS, PACS\HP Storage Users, CV Storage User

}

Then run following command as admin: XfAppMgr.exe register XFSecurity.cfg

C:\Program Files (x86)\Hewlett-Packard\XF\bin\win-32>XfAppMgr.exe register XFSecurity.cfg

Then stop the following Services:

HP P6000 Command View

HP P6000 PA Database

HP P6000 PA Server

Then start the Services again:

HP P6000 PA Server

HP P6000 PA Database

HP P6000 Command View

Now login in Command View works without reinstalling

Best regards,

Viktor Burba

Re: Insufficient Privileges with Command View 8.0

MMoak — Fri, 13 Mar 2015 17:52:50 GMT

Thanks Viktor,

Your solution worked for me on an EVA 4400/Command View v9 system. Moved the server to a different domain and couldn't login. Followed your steps, rebooted the server and was able to connect with the new domain credentials without having to reinstall.

Thanks,

Matt