topic Re: OpenSSH issue in Server Management - Systems Insight Manager

OpenSSH issue

Igor Bekker_3 — Wed, 23 Feb 2005 11:43:06 GMT

Hello,

Any time I want to Deploy anything I get the follow error message:

EXCEPTION CLASS: com.hp.mx.dtf.sshClient.MxSshFailedConnectionException
EXCEPTION: Unable to contact the SSH server on node "hq000ins001.acb.corp".

I checked and I have OpenSSH installed on the CMS

Please advise. Your help is greatly appreciated.

Re: OpenSSH issue

Mike Strako — Thu, 24 Feb 2005 09:49:23 GMT

Make sure the OpenSSH service is installed and running. If so, here is a doc that I put together. Follow the instructions step-by-step. Let me know how it works for you.

Mike.

Re: OpenSSH issue

Steve Kadish — Thu, 24 Feb 2005 09:51:05 GMT

To be clear, OpenSSH must be installed and the service must be running on BOTH the CMS AND the target nodes.

- Steve

Re: OpenSSH issue

Mike Strako — Thu, 24 Feb 2005 09:53:20 GMT

No, just on the CMS. Target machines do not require SSH.

Re: OpenSSH issue

Steve Kadish — Thu, 24 Feb 2005 10:02:27 GMT

Hi Mike,

I'm sorry to correct you, but if you want to run a tool on a monitored node using SIM, for instance deploying a support pack or using VPM, SSH must be installed on that monitored node.

Thanks,
- Steve

Re: OpenSSH issue

Mike Strako — Thu, 24 Feb 2005 10:10:09 GMT

LOL, I won't argue with you. You can install SSH on all your clients if you want to BUT it's not required. The secure communications connection is initiated by CMS using that secured path. I'm doing it here and have 520 managed servers with OpenSSH installed on just my CMS. I use my custom commands ALL the time, nightly reboots, server drive volume stats ETC.

Mike.

Re: OpenSSH issue

Igor Bekker_3 — Thu, 24 Feb 2005 10:28:53 GMT

Mike,

The Doc states to replace all Admin to simservice account. I dont have a simservice account. Should I create it first and give it Admin rights? Should that be a domain account?

Thanks,
Igor

Re: OpenSSH issue

Mike Strako — Thu, 24 Feb 2005 10:33:04 GMT

You can use a domain account that has local admin rights to each of your servers, that's what I did. By default, there is a bug in the way HP setup those parameters, that's why you must do a global find|replace with an account that has proper rights.

Mike.

Re: OpenSSH issue

Igor Bekker_3 — Thu, 24 Feb 2005 10:44:21 GMT

So just to make sure. I have a domain account ABCD, which is a Domain admin and Local Admin. I will place the simservice with ABCD.

Thanks a million, lets see if this works.

Re: OpenSSH issue

Mike Strako — Thu, 24 Feb 2005 10:46:33 GMT

Correct. Good luck.

Re: OpenSSH issue

Igor Bekker_3 — Thu, 24 Feb 2005 11:11:16 GMT

When runing the MXTOOL, I received the following error:
Successfully parsed tool file.
Cannot modify tool named "bdf" because the tool is invalid.
The required tool revision is less than or equal to the revision of the tool in
the repository.
...
....
....
No tools were modified.

This was for all the tools. Is my software outdated? How do I upgrade. I downloaded SIM4.2, PMP, OpenSSH And VCRM from the HP site and installed them.

Re: OpenSSH issue

Steve Kadish — Thu, 24 Feb 2005 11:21:31 GMT

Hi Igor,

Open up the .XML file for the tools your are re-registering. In the first line of each tool definition, you will see a "revision" variable.

Every time you modify a tool, increment this number before re-registering it. For instance, I usually would change:

revision = "2.0"

to

revision = "2.1"

You will no longer get this error.

Good luck,
- Steve

Re: OpenSSH issue

Igor Bekker_3 — Thu, 24 Feb 2005 15:24:52 GMT

Mike,

check this out:
C:\Program Files\HP\Systems Insight Manager\tools>mxtool -m -f mx-tools.xml
The following argument value was found where an option was expected: Ã»m
Usage: mxtool -a -f filepath
mxtool -m [-i] -f filepath [-x force]
mxtool -s -f filepath
mxtool -r -f filepath
mxtool -r -t toolname ...
mxtool -r -c category ...
mxtool -l d|f|n|t [-c category ... | -t toolname ... ]
mxtool -l f [-b encoding] [-c category ... | -t toolname ... ]
mxtoo

Re: OpenSSH issue

Igor Bekker_3 — Thu, 24 Feb 2005 15:27:43 GMT

Thank you guys, I truly appreciate all your help

Re: OpenSSH issue

Mike Strako — Thu, 24 Feb 2005 15:29:21 GMT

Your very welcome. That's why we are all here.

Mike.

Re: OpenSSH issue

Igor Bekker_3 — Thu, 24 Feb 2005 16:21:43 GMT

I stopped the OPENSSH service and deleted all the files. I deleted the pass file, and rant he command :
C:\Program Files\OpenSSH\bin>mkpasswd -d -u ABCD

Then I tried starting the service and it FAILS:
Error 193: %1 is not valid Win32 Application

Please advise.

Re: OpenSSH issue

Igor Bekker_3 — Fri, 25 Feb 2005 08:38:44 GMT

After doing this proceedure, SIM doesnt work at all. The Sim service is started, OpenSSH doesnt start. I cant even open the Sim Home page. Any suggestions?

Re: OpenSSH issue

Steve Kadish — Fri, 25 Feb 2005 09:12:50 GMT

Igor,

If you have a warrantee or other care pack on this server, I would think that at this point you would want to call HP support. They have a SIM desk and will help you out.

Good luck,
- Steve

Re: OpenSSH issue

Mike Strako — Fri, 25 Feb 2005 09:39:02 GMT

Iqor, I'm not exactly sure what step(s) you have done to make SIM not usable, the proceedure submitted ONLY pertains to OpenSSH, it's a seporate add-on to SIM, SIM can work without it but not all features will work, IE custom commands, VPM etc. Can you tell me what else you changed?

Mike.

Re: OpenSSH issue

Igor Bekker_3 — Fri, 25 Feb 2005 10:26:01 GMT

Mike,
These were my steps.
1- Created Domain Admin Account and gave it local admin privileges
2- I searched for the >administrator< and changed it to >sa_insightmgr< (5 files total)
3- I changed the Versions from 2.0 to 2.1 in each of those XMLs.
4- Ran the Mxtool and if worked fine for all 5 files
5- REBOOTED

------------
1- I checked all accounts to see if they had the .ssh folder. NONE had this folder.
2- I deleted know_hosts file
3- I delete passwd
4- Then I ran the command â mkpasswd â d â u sa_insightmgrâ
5- Then I tried to start OpenSSH service, It would not start, I restarted the Server and I nothing works.

I have this error message in Event Viewer:
com.hp.mx.database.DbVerificationException: Error loading database verification handler 'com.hp.mx.database.MsSqlVerificationHandler'
com.hp.mx.database.DbVerificationException: Error accessi