System Management Homepage

[Vinh Luu]

Hi,

I am trying to access the System management homepage of one of the discovered Windows2003 servers but am unable to login. On our other servers, being NT4 or Windows2000/2003, I am automatically able to see the system homepage without entering any credentials. The login account being used as displayed on the the homepage is administrator.

I tried using the other accounts like Operator and users, but no luck.

Any idea why this happens. and can someone explain to me the administrator, operator, and user accounts? I read the guide but am still uncertain.

Thank-you.

[Haridas]

The new HP System Management Homepage (SMH) in PSP 7.20 uses OS Authentication. There are two ways to login to SMH.

1. Local User accounts

By Default SMH allows OS administrators to login. So after install, you can login to SMH as "administrator" and "your OS administrator password".

To provide different rights to different users, You will have to create Different OS groups.

Create a usergroup for ex "smhoperators" in the OS. Add all the users who you think should be given only operator access, to this new group.

Similarly, "smhadmins" group for admin rights and "smhusers" for user rights. Add users appropriately.

Login to System Management Homepage as administrator. Go to "Settings->Security->user groups". Enter "smhadmins" in administrator group, "smhoperator" in operator group, and "smhusers" in users group. Save the configuration.

This way, You need not make all the members as part of local administrators.

2. Domain User accounts.

For domain users, You have to prefix the groupname / username with the domain name.

for ex. in usergroups page, you have to add mydomain/smhadmins instead of just "smhadmins". Then Login as "mydomain/myadmin". Same thing applies for operators and users.

If all your systems are part of a domain, then you need to create the usergroups in the domain controller. Add the usergroups in one SMH and then use HPSIM to replicate the settings to all other SMH.

If the systems are not part of a domain, then you will have to create the usergroups in individual servers and assign rights accordingly.

Administrator accounts have full rights to the system. Operator accounts have limited rights and users can only view the system details, but cannot make any Configurations on the managed node.

There is not much difference between operator and a user account in SMH. They are retained to be in sync with HPSIM operator and user rights. The operator account in HPSIM does have limited rights and is different from user acount in HPSIM. It all depends on how the Authorizations are configured in HPSIM.

[Vinh Luu]

Hi Haridass,

I have created a usergroup on our domain controller and added the necessary members. I added the usergroup in one SMH and then used HPSIM to replicate the setting to the server, but get the following error message:

The agent does not trust the HP Systems Insight Manager server. Establish a trust relationship

Presently my HPSIM is setup to trust all. I do not have the administrator account password for this system. Is there another way to go into the SMH page of a particular server without the OS administrator account.

Thks.

[Andrzej Kowalik]

Try this:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=832978

[Vinh Luu]

Hi,

Thanks for all the help but I am flabbergasted!@#@$ with this login stuff to SMH.

I have uninstalled SMH and upgrade it to the latest version 2.0.1.104. Before the upgrade I deleted the CPQHMMD.ACL file. But after the install I am still unable to login to any SMH page of any server with my domain name. It only works with the local OS admin account. The SHM page I am trying to login using a different account in on the server as HPSIM.

The above link posted did not work either.


Thanks.

[Haridas]

Okay. 2.0.1.104 does not use cpqhmmd.acl file anymore. so we'll not worry about that.

Let us assume the following.

Your HPSIM server is "Server A".
Lets say you have three SMH systems. "SMH1" "SMH2" and "SMH3" and they are part of your domain called "mydomain".

Three users "user1","user2","user3" are created in domain. Three different groups are created. "myadmins","myoperators","myusers"

Add "user1" to "myadmin","user2" to "myoperators","user3" to "myusers"

Step 1: browse to https://smh1:2381/. Login to SMH1 as local administrator. Goto user groups page. I assume that you want the domain users to access SMH. so in the usergroups page, enter the following.

"mydomain\myadmins" in the administrators field.
"mydomain\myoperators" in the Operators field.
"mydomain\myusers" in the users field. Save the configuration.

Logout and now you should be able to login to SMH1 as a domain account user1.

In the username filed, enter "mydomain\user1" and enter correct password. You should be able to login and have admin privileges.
========================================
Steps to make SMH1 trust your HPSIM.
========================================
Goto settings->security->TrustMode

Set the trust mode to "trust by certificate". Save configuration. Again Goto Settings -> Security -> Trusted Management Servers.

Enter "ServerA" in the field and click on Add Certificate from Server. Certficate is retrieved. Click on "Add Certificate to Trust List".

Now this SMH1 trusts ServerA (your HPSIM).
============================================
Repeat the same steps above to make SMH2 and SMH3 trust HPSIM.
============================================
Login to HPSIM as administrator. Create a replicate agents settings task. Select SMH1 as source device. Select the usergroups option in the task tree. Select SMH2 and SMH3 as targets. Execute the task.

The usergroups settings of SMH1 will be replicated to SMH2 and SMH3.

Now you should be able to login to SMH2 or SMH3 as "mydomain\user1" as a user with admin rights.

Hope its clear.

Cheers..
Hari

[David Claypool]

HP SIM has a new feature called "Configure or Repair Agents" that will fix your problems with agent access.