HPE EVA Storage
1820475 Members
2869 Online
109624 Solutions
New Discussion юеВ

Re: Insufficient Privileges with Command View 7.0

 
KeirL
Occasional Advisor

Insufficient Privileges with Command View 7.0

Hi all
I have command view 7.0 installed on a windows DC and it worked fine. I then decided to upgrade to 7.0.1 but then found that when I attempted to log in I can't. From the login screen it just says 'Insufficient Privileges' for all the accounts I have in the HP Storage Admins group. Even new users I've created and added to the group say the same. I'm sure this is to do with the fact that the CV server is also a Windows Domain Controller, but all thie things I've played around within AD haven't helped. To make matters worse I've now tried un-installing CV7.0.1 and re-installed CV7.0, but this too now tells me I have insufficent privileges.
I have CV installed on another windows server (not a DC) and that's fine,
Has anyone seen this before and can suggest a fix. Is CV actually supported on DC's?

Thanks
K
17 REPLIES 17
Rob Leadbeater
Honored Contributor

Re: Insufficient Privileges with Command View 7.0

Hi,

I've not used 7.0, but in 6.0.2 there is a problem that makes it look as though you can't logon...

When the CV EVA webpage first loads, check to see that it has completed loading before entering your username/password. ("Done" in the bottom left hand corner on IE)

If it hasn't then you can't logon.

If the page never completely loads, then try clearing all your browser cache and/or resetting IE's security settings...

Cheers,

Rob
KeirL
Occasional Advisor

Re: Insufficient Privileges with Command View 7.0

Hi
Thanks for that. I've checked it and it seems fine. The 'Done' appears in the corner as expected.
I'm convinced it's a DC thing as there aren't any 'local groups' on the Server. I also installed RSM on the box and get the exact same issue when I attempt to start the RSM server. it comes back and says I do not have the right privileges to log on.
I saw a thread that had similar issues and the author was able to get round it by moving the HP Storage Admins group into the 'Builtin' OU and assign the 'Connect from Network' right. I can move it into the OU but I can't find how to assign the 'Connect from Network' right.
Is anyone able to guide me through that bit?
Thanks again
K
Osama Odeh_1
Regular Advisor

Re: Insufficient Privileges with Command View 7.0

I have command view 7.0 installed on a windows 2003 stand alone;and its working
fine
but after promote server to backup domain controller.
cannot login and insufficent privileges appear.
also after move Hp storage admin group to builtin group still problem exist.

also we uninstll command view 7 and its component from server and reinstall it again
but still the same problem.

Thnx
RichardJ
Advisor

Re: Insufficient Privileges with Command View 7.0

I have seen this problem also and could not fix it.
Luckily the server was brand new so we ended up re-installing windows and starting from scratch.
since then I always ensure the server is on the domain and logon using the CV user account, then install CV.

I look forward to seeing a proper fix...
Wayne Gillan
Advisor

Re: Insufficient Privileges with Command View 7.0

We also had the "insufficient privileges" issues with Command View 8.0 on a standalone 2003 server. The problem came about after we changed the host name of the server to something else. When I changed the host name back to it's original name, I was able to logon to Command View as normal. Weird...

Cheers,
Wayne
V├нctor Cesp├│n
Honored Contributor

Re: Insufficient Privileges with Command View 7.0

Hi, you cannot rename the server or join it to a domain after you have installed Command View.
This has been documented on the Command View 8.01 release notes

Login failure
Symptom: After installing HP Command View EVA 8.x/7.0.1, if you change the server name or the server setting from a local/workgroup system to a domain member/controller system or vice-versa, then subsequent login fails with insufficient privileges.
Solution: Reinstall HP Command View EVA 8.x/7.0.1 and configure the local/domain settings accordingly during installation.
HP-UX User_1
Frequent Advisor

Re: Insufficient Privileges with Command View 7.0

To fix this problem you have to go to Computer Managerment ---> Local User and Groups ---> Users. Then right click the local user account (i.e. Administraor) go to properties ---> "Member of" TAB---> Advance ---> Find Now. Then select either "HP Storage Users" or "HP Storage Admins." And you are done!!!

Have fun.
Sajeev2007
Frequent Advisor

Re: Insufficient Privileges with Command View 7.0

CV should never be on a DC
Install on a separate stand alone server
Marschalleck
New Member

Re: Insufficient Privileges with Command View 7.0

Ok, so i guess Command View runs only if the Computer is NOT a Domain Controller and has local Users/Groups.

Very funny....
Bill Tait
New Member

Re: Insufficient Privileges with Command View 7.0



Look at the following file C:\Program Files\Hewlett-Packard\Sanworks\Element Manager for StorageWorks HSV\CCBGN*-1.log. This file shows the configuration during installation of the CVA Console. Make sure the group names, domain names, host names, etc... have not changed. The HP EVA Console software will get the "Insufficient Privileges" error if there are any changes.
If you reverse any changes you made (ie:rename the host back to its original name) then you wil be able to login. If this is not possible then you have to re-install. Installing CV on a domain server is preferred. If HP installs remote support SIM on the CV server then it will need to be on the domain.

Bill
Rob Bidwell
New Member

Re: Insufficient Privileges with Command View 7.0

Well I am having a similar problem but just trying to install Command View 8 on a Windows 2003 Domain controller!!

Is it supported?

I am logged on as domain admin and the command view install fails before it even really begins saying I have insufficient privilages

Any ideas?
Antonio Serpa Pinto
New Member

Re: Insufficient Privileges with Command View 7.0

Hi all.

I had the same problem (CVE on Windows 2003 DC & Insufficient Privileges) and fixed it.

The trick is to uninstall CVE from the DC, then move the HP Storage Users and HP Storage Admins that was created by the installer in Active Directory to the "Builtin" Folder.

Afterwards, install CVE selectin "Yes, set the privileges for Domain Groups", and in the following two screens select the Domain Groups you have moved to the Builtin folder:

Domain: your_netbios_domain_name
Storage Admin Group Name: HP Storage Admins

Domain: your_netbios_domain_name
Storage Users Group Name: HP Storage Users

Should work afterwards... Good luck.
Best regards, CPCis PT.

Christian DG Spurr
New Member

Re: Insufficient Privileges with Command View 7.0

Hi,

I'm having the same problem - when I try and re-install Command View, the install process jumps past the 'security groups' option and won't allow me to select either Local or Domain privileges...

The server isn't a DC but I changed the name and added it to the domain and then these issues appeared.

I've tried creating these groups locally and in the AD but to no avail.

Thanks in advance for any help!

Christian
Dario28
New Member

Re: Insufficient Privileges with Command View 7.0

I need to move a server from 1 domain to another with Command view running on it,

I realise that the release notes say "Login failure
Symptom: After installing HP Command View EVA 8.x/7.0.1, if you change the server name or the
server setting from a local/workgroup system to a domain member/controller system or vice-versa, then
subsequent login fails with insufficient privileges.
Solution: Reinstall HP Command View EVA 8.x/7.0.1 and configure the local/domain settings
accordingly during installation."

But does that also include domain to domain or just workgroup to domain

I have added the new domain admin accounts to the HP Storage Admins group (locally) and can log in using the new domain credential in old domain - So will the domain switch work ??

Also need to know if Replication Solutions management will work also as its on the same box.

Thanks
Andre Stewart
Frequent Advisor

Re: Insufficient Privileges with Command View 8.0

I am also having this problem, but it started for me when I attempted to use the group policy editor to rename the administrator account.  When it is changed, the new name belongs to all the right Groups as the actual SSID has not changed.

 

If I change the name back to the original name, CV works fine.  Is it possible to reconfigure CV to recognize the new administrator's account name?

 

I am running an hp Openview Storage Management Appliance III (Windows 2000 Advanced Server SP 4) with Storage Management Appliance Software 2.1 and Command View EVA 8.0.

Burba Viktor
New Member

Re: Insufficient Privileges with Command View 8.0

Hi,

 

I was looking on the google for the answer for this question, and all I could find was like reinstall Command View or demote your DC, both solutions are inadequate and can be done only in test environment. So long story short I could not find anything, so I had to try to solve it myself. And here is the solution:

 

I had it on Win2008 which was promoted as DC, after that as expected not sufficient privileges

 

So after Win2008 promoted as DC, there is no more HP groups obviously, so I created just as expected two groups in AD HP Storage Admins and HP Storage Users and added desired users into this groups. No big deal so far. Then comes interesting part, what you have to do is to edit file XFSecurity.cfg in C:\Program Files (x86)\Hewlett-Packard\XF\bin\win-32.  You might have only Program Files if you have 32-bit Windows or whatever your original installation path used to be. In this File find following section and change following lines with your NetBIOS domain name

 

Lines:

 

    group %L, %L\HP Storage Admins, CV Storage Manager

    group %L, %L\HP Storage Users, CV Storage User

 

change to, where PACS is your NetBIOS name

 

    group PACS, PACS\HP Storage Admins, CV Storage Manager

    group PACS, PACS\HP Storage Users, CV Storage User

 

 

So it looks like this:

 

Section Groups {

# syntax: group <Security Domain>, <Group Name>, <Role>

#         <Security Domain> can be %L, the local host name, or a domain name. If "%L" is used, then XF will deal with host name changes automatically

#         <Group Name> is the name of a security group

#         <Role> a previously defined role in the "Roles" section above

#    group %L, %L\HP Storage Admins, CV Storage Manager

#    group %L, %L\HP Storage Users, CV Storage User

    group PACS, PACS\HP Storage Admins, CV Storage Manager

    group PACS, PACS\HP Storage Users, CV Storage User

 

}

 

Then run following command as admin: XfAppMgr.exe register XFSecurity.cfg

 

 C:\Program Files (x86)\Hewlett-Packard\XF\bin\win-32>XfAppMgr.exe register XFSecurity.cfg

 

Then stop the following Services:

HP P6000 Command View

HP P6000 PA Database

HP P6000 PA Server

 

Then start the Services again:

HP P6000 PA Server

HP P6000 PA Database

HP P6000 Command View

 

Now login in Command View works without reinstalling

 

Best regards,

Viktor Burba

MMoak
New Member

Re: Insufficient Privileges with Command View 8.0

Thanks Viktor,

 

Your solution worked for me on an EVA 4400/Command View v9 system.  Moved the server to a different domain and couldn't login.  Followed your steps, rebooted the server and was able to connect with the new domain credentials without having to reinstall.

 

Thanks,

Matt