SSSU questions

[JL Billman]

Hi ya'll. I am trying to fidn a way to manage EVA's attached to HP-UX boxes. I understand that the management of the EVA is done from a Proliant DL380 server attached to the array. Now comes the problem. We need a way to be able to manage the array from the HP-UX boxes. The problem is we need to go through a VPN to manage the 9000's and the EVA's. We can telnet to the 9000's and I have placed SSSU on one of the them but I can't get it to communicate with the EVA manager. I get connection refused messages in SSSU.

My guess is something is not configured on the manager to allow remote management. The EVA's were setup and installed by HP so we have little documentation on what they did. Any idea what I need to do to the Windows based manager to beat it into submission?

[Ivan Ferreira]

Managing EVA using SSSU is not a simple task. I suggest you to create a remote desktop session to the Command View server or use something like VNC. For example see:

dingetje.homeip.net/howto/VNC/VNC_PuTTY_HOWTO.pdf

[JL Billman]

Unfortunately we can only access the 9000's by telnet and it takes multiple hops to get to the machine. The VPN and/or firewall do not let anything except ftp and telnet through.

[Steven Clementi]

What, if any, errors are you getting?

ALso, do yo uhave corrosponding versions of CV and SSSU?

If you have CV 5, you should probably use SSSU 5.x, have CV 6 then you should use SSSU 6.x, etc.


Steven

[JL Billman]

SSSU and CV are both version 6.0.

Here is a postion of the SSSU error log:

07/05/07 09:29:59 - 1723560401, cvclient, 9130, 1, 1, cvclientlib, 319, CVClient ERROR: the https session cannot connect.
07/05/07 09:30:50 - 1723611156, net, 9356, 1, 2, secsocket_ossl, 59, Initializing OpenSSL libs
07/05/07 09:30:50 - 1723611201, net, 9356, 1, 2, secsocket_ossl, 386, ***** _createContext *****
07/05/07 09:30:50 - 1723611204, net, 9356, 1, 2, httpclient, 36, WARNING: copy ctor used - dangerous
07/05/07 09:30:50 - 1723611212, net, 9356, 1, 2, httpclient, 56, Connect: 10.162.7.19:2372
07/05/07 09:30:50 - 1723611213, net, 9356, 1, 2, secsocket_ossl, 169, SSL Connect: 10.162.7.19:2372
07/05/07 09:30:50 - 1723611214, net, 9356, 1, 1, socket, 130, Failed to connect; errno is 239 (Connection refused)
07/05/07 09:30:50 - 1723611216, net, 9356, 1, 2, secsocket_ossl, 288, closing connection
07/05/07 09:30:50 - 1723611216, net, 9356, 1, 2, socket, 178, close
07/05/07 09:30:50 - 1723611217, net, 9356, 1, 1, secsocket_ossl, 179, Failed to establish socket connection
07/05/07 09:30:50 - 1723611217, net, 9356, 1, 2, secsocket_ossl, 288, closing connection
07/05/07 09:30:50 - 1723611219, net, 9356, 1, 2, socket, 178, close
07/05/07 09:30:50 - 1723611219, net, 9356, 1, 1, httpclient, 61, Failed to connect to: 10.162.7.19:2372
07/05/07 09:30:50 - 1723611220, cvclient, 9356, 1, 1, cvclientlib, 319, CVClient ERROR: the https session cannot connect.

[Steven Clementi]

what about any erros on your console when you run sssu? Is there anything?


Steven

[JL Billman]

Here's what I see:

root OMG1-ALP# ./sssu_hpux11_11_parisc


SSSU for HP StorageWorks Command View EVA
Version: 6.0
Build: 34

Manager:10.162.7.19
Username:administrator
Password:

deleting file::/tmp/jlb/logs/cvclienttrace-070504-1.log, file age::5, maxAge::3
Error opening https connection

Press return to exit
root OMG1-ALP#

[Amar_Joshi]

Hi Billman,

I am suspecting something on password you use. Remeber that for CV6 it uses the Windows logon authentications. I believe you must use the same login/password which is tested to login to the command-view-eva.

In past SMAs used to use different username/password (default was administrator/administrator) but with new Command-view-eva it's different.

Also, check if with the network admin if port 2372 (used for SSSU to CV communication) is not blocked in your network, or a firewall setting on CV box which blocks access to this port.

My 2 cents worth.

[Steven Clementi]

Looks like an authentication problem...


I take it 10.162.7.19 is the IP address of your CV server?

Confirm that administrator is in the "HP Storage Admins" local group on the CV server.


Steven

[JL Billman]

I am using the ip userid and password I was given by HP when they set up the systems. I am pretty sure abotu the ip address. I will be going on site next week but I cannot get into the system until then since I have no way to get to the network other htan multi-hops of telnet sessions.

[Steven Clementi]

"...I cannot get into the system until then since I have no way to get to the network other htan multi-hops of telnet sessions."

The system you are running SSSU on... is it on the same physical local area network as the CV server?

Are you sure the server is up and running?

You and/or your company should look for a way to get betetr access to the management server or open up some additional ports so you can get to the management server, or install a modem... something.


Steven

[JL Billman]

Yes, the rp5470 and the DL380 are on the same subnet. I hve been able to ping the DL380 but I am not sure what is running on it and what is not.

In an ideal world it would be great to punch holes in our firewall and our customer's firewall to allow access with all the nifty tools that are out there. Unfortunately in the real world we have to use the tools that work in the environment we are given.

[Rich Rauenzahn_1]

I'm having a similar problem -- I don't believe there is a service/agent running on port 2372 of the management console.

I get connection refused to that port on both on the management box and the UX box. (Even though sssu works locally on the box -- I suspect it uses a different port when local.)

Is there a switch that needs to be pulled to turn on remote SSSU access? Haven't found one in the docs yet...

Rich

[Rich Rauenzahn_1]

Here's an interesting piece of documentation. For me, my eva web page is on port 2381:

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00605846/c00605846.pdf

It says..

Starting HP Command View EVA
To start HP Command View EVA, you can browse to the management server (general-purpose server, dedicated management server, Storage Management Appliance, or ProLiant Storage Server) from a client machine.
To start HP Command View EVA on the management server:
1.
Open the browser.
2.
Using the server name or IP address as the host_name, enter the following:
https://host_name:2372/command_view_eva
The HP Command View EVA login window opens.

And then it says...

You can change the port that you use to log into the HP Command View EVA user interface. (The default port is 2372). You can also change the timeout parameter, which determines how much inactivity can occur before the browser session times out and requires you to log in again. To change these parameters, you must edit the cveva.cfg file, which is located in the C:\Program Files\Hewlett-Packard\SANworks\Element Manager for StorageWorks HSV\Bridge directory. (If you installed HP Command View EVA on an SMA, the directory is C:\Program Files\Compaq\SANworks\Element Manager for StorageWorks HSV\Bridge.)
You can edit this file using a text file editor. Go to the following section:
Section Webserver {
# The port for SSL connections
# Default: 2372
port 2372
# The time limit on HTTP sessions in seconds
# Default: 3600 (1 hour)
# Set the value to zero to disable the timeout feature
timeout 3600
}
Change the port and/or timeout parameter to the appropriate value and save the cveva.cfg file. You must restart the HP Command View EVA service for the changes to become effective. For instructions, see "Restarting the HP Command View EVA service" on page 35.

[Rich Rauenzahn_1]

Resolved it for myself -- I had the wrong version of ssu (was using a 6.x client with 4.x). Using the 4.x client fixed it.

I've also seen references to openssl being required for some versions -- solution/problem given was:

A line like this indicates a problem with openssl:
04/12/06 09:46:41 - 1314663978, net, 2824, 1, 1, secsocket_ossl, 201, Connect failed: Err: -1 RC: 5

Search for openssl on hp.com (free download) and install it