HPSIM 5.1 SP1 - Pre defined security groups question

[Dana Swanson]

Hi All,

After installing HP SIM 5.1 SP1 there are three groups pre-defined from the HP System Management Homepage 2.1.7 Setup section of the install.

You define these groups when you enter the Operating System Groups, pointing to OS local groups or AD global groups.

Am I wrong to be using the pre-defined User and Operator groups to configure Toolboxes and Authorizations on so users added to the OS group will get a CMS account and security settings?

Has anyone created 3 local groups on their CMS server and 3 global groups in their AD domain and added the globals to the locals. Pointing the CMS to use the local groups while adding the actual users to the globals?

Thanks,

Dana

[Dana Swanson]

Hi All,

I wanted add how I configured the user group
and see if this should work. Maybe security
is corrupt on my CMS or database. (shrug)

Here's the last steps I tried:

Pre Troubleshooting Steps:
Options -> Security -> Users and
Authorizations
Users Tab
Deleted the test user for read only
testing
Delete the user group
Toolboxes Tab
Delete the Read Only Tools Toolbox I had
created
Authorizations Tab
Confirm Authorization does not exist for
user group

New Configuration:
Users Tab
1. New Group
2. Group name [on central management
server (CMS)]: hpsim-users
*hpsim-users in the AD domain
3. Domain (Windows® domain for login
name):
XXX 4. Full name: HP Systems Insight Manager
for Users
5. Copy all authorizations of this user or
[template]: (none)
6. Central management server configuration
rights: none, no configuration of
central management server allowed
7. Local IP Address Restriction: N/A
8. Click OK

Toolboxes Tab
1. Click New
2. Name: Read Only Tools
3. Description: Read Only Tools
4. Toolbox is enabled: Yes
**For testing purposes I copied ALL tools
to the Toolbox contents box (right side)
5. Copy All Tools from available to
enabled on the right side of the screen

Authorizations Tab
1. New
2. Select: User Group(s)
3. Place check in XXX\hpsim-users
XXX = our AD domain name
4. Manually assign toolbox and
system/system
group authorizations:
a. Select Toolbox(es): Read Only Tools
b. Select Systems: All Managed Systems
AND CMS
5. Click OK

Sign Out of CIM Console

Sign in to CMS Console with user who is a
member of the group XXX\hpsim-users
*Signing in with username, password and XXX domain

Click All Systems

No systems display and the message comes up: The collection is empty.

Thanks,

Dana

[Dana Swanson]

Hello,

I decided to un-install hp sim, delete the database and install hp sim again. During the HP System Management Homepage 2.1.7 Setup I choose to point to global groups instead of local groups. After install there were no default security groups created.

This may have fixed the issue. I'll create new global groups for the admins, operators and users.

Will see what happens.

Dana

[Dana Swanson]

I tried re-install using 3 domain global groups for HP System Management Homepage 2.1.7. This time the pre generated accounts in HP SIM were not created. I created 3 local groups on the hp sim server and configured hp sim to point it's groups I created to these OS groups. I still don't see any managed systems when using a auto generated user based on the admin group, toolbox and authorizations.

Will post when I find more info.

Dana

[Dana Swanson]

I was able to get help from a high level support person at hp. Once I re-do my documentation I'll post the reccomended fix that worked out well. I'm going to close this post and will open a new one posting what they told me when my docs are done.

[Dana Swanson]

Will post the fix when my own docs are re-done.