Server Management - Systems Insight Manager
cancel
Showing results for 
Search instead for 
Did you mean: 

Configure and Repair Agents: credentials problem

Scott_278
Valued Contributor

Configure and Repair Agents: credentials problem

Trying to repair the trust relationship on some Windows servers with "Configure and Repair Agents". The problem is that the repair is only successful when the account used to run the SIM service on the CMS has admin rights to the target server. In other words, the Configure and Repair Agents setting is not using the credentials I configure it to use.

I've tried a couple of things. First, I tried using the local administrator credentials which is common to all our servers. I left the DOMAIN field blank (I think this worked in previous versions of SIM when using multiple targets). Second, I used my domain account which is a member of the local administrators group on all the servers. This failed too.

What DID work was to use the credentials of the domain account which the SIM service runs under, and I had to add that account to the local Administrator's group on the target servers.

In the cases where this fails, I get the same error: "HP Systems Insight Manager was unable to copy the HP Repair Tool executable over to the target system. Verify that target system has sufficient disk space."

I wonder if there is some XML file I need to edit or something?
15 REPLIES
Rich Purvis
Honored Contributor

Re: Configure and Repair Agents: credentials problem

When this feature works it is really great. However, there were some initial issues when it first came out in that it was dependent on the SSH install and if that had issues it would not work. Since then a lot of those problems have been cleared up, are you using HPSIM 5.0 or later? The only requirement should really be that the ID be in the local Administrator group or at least it works best in that configuration. You shouldn't have to use the same ID that HPSIM is running under.

-Rich
Why does my tivo keep recording Nickelodeon?
Scott_278
Valued Contributor

Re: Configure and Repair Agents: credentials problem

I'm running 5.0 SP4.

I tried six different scenarios noted below. In all scenarios, I only tried to repair the Trust - nothing else. The HPSIM and OpenSSH Server service on the CMS are both running under the same domain service account.

Scenario 1:
Credentials used: local administrator on target server
SIM Service Account: Not member of local Adminstrators group
Result: HP Systems Insight Manager was unable to copy the HP Repair Tool executable over to the target system. Verify that target system has sufficient disk space.

Scenario 2:
Credentials used: local administrator on target server
SIM Service Account: Is a member of local Adminstrators group
Result: Successful

Scenario 3:
Credentials used: domain account and a member of local Administrators group
SIM Service Account: Not member of local Adminstrators group
Result: HP Systems Insight Manager was unable to copy the HP Repair Tool executable over to the target system. Verify that target system has sufficient disk space.

Scenario 4:
Credentials used: domain account and a member of local Administrators group
SIM Service Account: Is a member of local Adminstrators group
Result: Successful

Scenario 5:
Credentials used: SIM service account
SIM Service Account: Not member of local Adminstrators group
Result: (Different) HP Systems Insight Manager was unable to connect to the target. Retry with administrator credentials for this target.

Scenario 6:
Credentials used: SIM service account
SIM Service Account: Is a member of local Adminstrators group
Result: Successful

I think this is a bug, but would like validation from someone else before I call it in.
Joel Rubenstein
Honored Contributor

Re: Configure and Repair Agents: credentials problem

It turns out that the successful execution of this tool depends not only on the credentials you supply but also the rights that the SIM service account has. So even though you may supply valid credentials for the remote node if the SIM service account does not have access to the node the task will fail.
Scott_278
Valued Contributor

Re: Configure and Repair Agents: credentials problem

What exactly do you mean by "it turns out"? That is the behavior I am seeing, but I don't see that requirement anywhere in the documentation. What do I need to provide credentials for if SIM is going to use it's own credentials anyway?

Worse yet, I found that the credentials you provide are irrelavent. I added the SIM service account to the local administrators group on the target, but provided completely invalid credentials. But the repair was still successful. That is scary, undocumented behavior.
Joel Rubenstein
Honored Contributor

Re: Configure and Repair Agents: credentials problem

I agree it should not work this way. I suggest you open a support case with HP so that a formal product defect can be entered.
Scott_278
Valued Contributor

Re: Configure and Repair Agents: credentials problem

That's the confirmation I was looking for. Thanks, I will post the case number when I get it.
Aspi Jasoomani
Occasional Visitor

Re: Configure and Repair Agents: credentials problem

Hi Scott,

Did you get this issue with the SIM Configure and Repair Agents resolved.

I am facing exactly the same problem and would like to know how your problem was resolved - without having to add the HP SIM account credentials in to the Local Administrator group for each managed machine.

Do let me know. Thanks
Scott_278
Valued Contributor

Re: Configure and Repair Agents: credentials problem

Interesting that you replied today. I just informed HP today that after almost one year, I am no longer willing to work on this case. They claim they have development resources actively engaged and working on the problem. I did had several meetings with Support and Development on the phone to verify the behavior I claim, but no resolution had been found. HP claims there is one more customer with the same behavior, and they also claim the developers have tested out some debugging code with that customer, but the details have not been analyzed yet. Funny they work with the other customer but not me who opened the case initially.

I am very displeased with the support I received from high-level escalations, and the lack of communication from escalations and the development team. You'd figure after 1 year there would be some type of progress, but there is absolutely none.

Now that I have a different job, I don't care anymore what happens with this product. It has potential, but support is terrible. I hope you have better luck than I did.
Scott_278
Valued Contributor

Re: Configure and Repair Agents: credentials problem

For future reference, my case number was 3214060161.
Trent Ditto
Occasional Visitor

Re: Configure and Repair Agents: credentials problem

Scott, I would like to address your interpretation of the facts you stated above. I worked with you on this issue and the debug version of Configure and Repair Agents was offered to you but I think you had already lost patience with the issue, or at least that is how the support engineer assigned to your issue explained your opinion to me. The other customers observing this issue have already replied to HP with thier debug output and their cases are moving forward. We have not come to a resolution yet, but the debug output is aiding the developers in understanding what is unique to these respective domain environments that is causing Configure and Repair Agents to fail. If you are interested in continuing the support of this issue please contact your support engineer again, run the debug version of Configure and Repair Agents that you were provided and send us the output file. It will be reviewed and used to help resolve this issue.
David Collins_5
Occasional Visitor

Re: Configure and Repair Agents: credentials problem

I also would like to review a few facts. The debug version of the tool was sent to you on June 23rd. We could have had your debug data before his, so the only reason we were reviewing his data instead of yours was we had his first. We got his data on July 5th and they needed a few days to look that over. It is in the hands of the most advanced folks regarding SIM. If you wish to keep the case going, as Trent said, send me the debugs. The more the merrier.

I am personally sorry this has taken so long to resolve, but this is important to fix, as this tool is one used by many customer and creates a great deal of ease get your agents in order. Even if you didn't want to keep up on this case, I will keep you updated, as planned to do.

BR,
Dave
Finner
Occasional Visitor

Re: Configure and Repair Agents: credentials problem

Had the exact same issue with SIM 5.0. Logged a case with HP and got confirmation that it is a know issue with HP SIM 5.0 and would be fixed in SIM 5.1.
I have tested 5.1 and it works.

From my own testing, it appears that 5.0 tries to authenicate with target systems using the cms domsin account and the local cms admin account despite what you provide during the config\repair.

This drove me nuts for ages and am happy to say it is now fixed as 5.1 will use the provided account (during config\repair)
Danny Villazon
Occasional Advisor

Re: Configure and Repair Agents: credentials problem

I am having the same issue with 5.1 sp5. Can someone please explain what I am doing wrong I have both the service account and the running account as admins of the box and I still recieve.

"HP Systems Insight Manager was unable to copy the HP Repair Tool executable over to the target system. Verify that target system has sufficient disk space."

Please someone advise.
hhcteco
Occasional Visitor

Re: Configure and Repair Agents: credentials problem

I had the same problem, please tell me if iam doing something wromg or if i could run the debug version. Thank You in advance
mark q
Regular Advisor

Re: Configure and Repair Agents: credentials problem

I have the same issue here

I have a local account (domain) that I use that is not a member of the administrators group and I cannot run this (I'm running sim 5.2 with the service pack).

anyone get anywhere with this?? I really don't want to lock this account out again since sim seems to do this automatically when you add a server now.