System Discovery and Credentials

[Nancy Kafer]

I have a scheduled task that runs each day to discover my Windows servers. Credentials have been set up as part of the job to log into the Windows boxes. I also have set up a login for my Windows boxes as well as a login for my ESX hosts in the global credentials configuration.

When I run my discovery task I get a "Logon Failure" message in my Windows event log for one server (none of the others that are discovered have this message). The user specified in my error message is the login that I want to be used only for my ESX hosts.

Since this is configured on my system discovery task why am I only seeing this message for 1 out of 30 Windows servers?

This is driving me nuts!!!!

Thanks for any help.

[marsh_1]

hi,

does using configure and repair agents fail for this system as well ?

[Nancy Kafer]

The only thing that failed was the "Subscribe to WBEM/WMI Indications". The message said to check to see whether the target system meets the requirements and WBEM protocols are not valid/enabled for this system in HP SIM.

One thing I've discovered....it appears that regardless if the first logon is successful it tries the next logon in global credentials and then fails (which it would because this is a ESX user not a Windows user). Also, I was playing with the discovery task itself and found that if I check the "If this login fails use other logins that may apply..." I get the message (once again for my ESX user). If I uncheck this box I don't see this failure. In either one of these cases I do see successful login messages for my Windows user.

I'm confused how it would successfully log in using one user and then proceed to try other logins.

These logs are going to a log management appliance we have as well. When I run an authentication report I only see login messages for my domain controllers, HP SIM server and nagement server that I'm using for managing my EVA. I don't see any logins (successful or unsuccessful) for any of my other servers.

Is this normal?

Thanks.

[marsh_1 · Accepted solution]

hi,

the 5.3 trg says this about that setting for a single system :-

For a single system:
1. Enter the user name and password.
2. To use other credentials if the assigned credentials fail, check If these credentials fail, try other
credentials that may apply. Click the Learn more link for additional information. By default this box
is not selected, unless you have upgraded HP SIM.
3. Click OK

what is meant by upgraded hp sim is not clear.

for groups of systems which is what i thought you had configured it has a different setting :-

For groups of systems:
1. Enter as many default user names and passwords as needed by clicking Add. To delete user name and
password pairs, click Delete beside the pair you want to delete.
If you selected to delete a user name and password pair for a group of systems, select how you want
to delete them. Select from the following:
â ¢ Delete the credentials and any working references to them
â ¢ First copy the credentials to all systems referencing them, then delete the global credentials
2. (Optional) To try additional credentials, select Try Others
3. Click OK

if that option in step 2 is set it implies (in that it is not specifically stated as the other option is) that it will try additional credentials regardless of the result of previous authentications.

hth

[Nancy Kafer]

Thanks for the explanation. I guess I would have expected that the additional credentials would only be tried if there was a failure authenticating with the credentials specified on the system or task.