WBEM permissions to access MSA

[jeremy shannon]

I am trying to get my MSA 1500 to show up in SIM. When I rerun WBEMDisco from my SIM server I receive the text in the attached file. I will gladly provide more information, if needed. Thank you in advance for any assistance.

[Rob Buxton · Accepted solution]

I've never set up wbem for an MSA, only an EVA. But there the credentials you use are what are configured into the SMI-S, they're not domain or local server credentials.
The error does indicate an access issue.
Also for the EVA the namespace is root/pg_interop so the namespace may also be wrong.
See:
ftp://ftp.compaq.com/pub/products/storageworks/smisproviders/smis_troubleshooting.pdf

[jeremy shannon]

It was the user context, i was trying local and domain users not realizing there was a SMI-S permissions context. Thanks for replying, this issue has been resolved.

[fred Passeron]

hi

the MSA is connected to a server that runs the MSA provider, giving through wbem the necessary infos he wants as long as they can talk together.

Once the MSA provider is installed, it needs to be configured. There is a command line tool to run to modify the accounts password used to connect to the msa through wbem.
By default, it comes with Adminitrator/Administrator and administrator/administrator combination. Use the Useraccount.bat tool to change these credentials. These credentials should be then set up in HP SIM in the option menu under protocols settings of the server connected to the MSA.

Once they match, you can run an identify on the server connected to the MSA, the MSA should arrive in HP SIM shortly after.

ftp://ftp.compaq.com/pub/products/storageworks/smisproviders/msa_provider.pdf

from the readme file :
Configuring SMI-S MSA
---------------------

The set of configuration files you may modify are:

Cim.properties: CIMOM related parameters for enabling SSL, JAAS etc.
Passwords: The user names and passwords for the authentication of the
clients connecting to the CIMOM server.

Configuration parameters shown below are set in the file
\Program Files\Hewlett-Packard\SMI-S\cimom\cim.properties.
For changes to take effect, after editing the file, save the changes
then restart the hpSMISCIMOM service.

Cim.properties
--------------
EnableBasicAuthorization (true or false)
Set to "true" to enable the basic level of authentication and
authorization.

EnableCompleteAuthorization (true or false)
Set to "true" to enable authentication and authorization on each
command before it can be run . If this is set to "true" then
EnableBasicAuthorization is ignored.

EnableSSL (true or false)
Set to "true" to enable SSL.


UserAccountsManager.bat
-----------------------
User accounts are organized into groups and a set of permissions are
assigned to each group using JAAS. To manage the user accounts, use
the script file
Program Files\Hewlett-Packard\SMI-S\cimom\UserAccountsManager.bat.

To find the list of options supported:
UserAccountsManager -h

To list the available groups and users:
UserAccountsManager -LG

Note: There are no input parameters to add or delete groups.
User accounts in the Administrator group have complete control of all
operations.
User accounts in the User group can only run read-only operations.

To add a user:
UserAccountsManager -AU -G -U -P

Example:
UserAccountsManager -AU -G Administrator -U Tom -P forest

Note: The parameter Group must be one of the groups listed by the -LG
option.
A user name can exist in only one group.

To change password for a user
UserAccountsManager -CP -U -O -N

Example
UserAccountsManager -CP -U Tom -O forest -N pathway

To remove a user
UserAccountsManager -DU -U

Example
UserAccountsManager -DU -U Tom

hope it helps

fred

[jeremy shannon]

Thank you Fred. I appreciate the in-depth response, have a good day.