What is the version of NaviCLI Server Software are you using?

Try: /naviseccli -address 1.2.3.4 -user admin -password AAAA -scope 0 security -certificate "arrayconfig capture output /opt/Navisphere/bin/Capture158.xml"

If this doesn't work, Can change the password for a while if password contains any special characters and try the command again?

Hi Ankit,

I have tried your command with the actual IP/username/password, but looks like the 'security' option is complaining.

Note that there is a fullstop (.) in the password string, but that shouldn't be the issue because other simple command option such as getconfig works fine.

------------------------------------------------------------------

Invalid Command. Invalid command line parameters.

usage:  security

  -adduser -user USER -password PASS -scope global|local

      -role administrator|storageadmin|operator|securityadministrator|dataprotection|localdataprotection|datarecovery|sanadmin|networkadmin|nasadmin|vmadmin

      [-type user|system] <-o>

  -rmuser -user USER -scope global|local <-o>

  -list [-user USER] [-scope global|local]

      [-role administrator|storageadmin|operator|securityadministrator|dataprotection|localdataprotection|datarecovery|sanadmin|networkadmin|nasadmin|vmadmin]

      [-type]

  -changepassword [-newpassword PASS] <-o>

  -changeuserinfo -user USER -scope global|local [-newpassword PASS]

      [-newrole administrator|storageadmin|operator|securityadministrator|dataprotection|localdataprotection|datarecovery|sanadmin|networkadmin|nasadmin|vmadmin]

      <-o>

  -listrole

  -ldap -listserver [-primaryserver]|[-alternateserver]

  -ldap -addserver -portnumber PORTNUMBER

      -servertype LDAP|AD -protocol LDAP|LDAPS [-cert certificateFilePath]

      -domainname domainname -binddn binddn -bindpassword PASSWORD

      -usersearchpath usersearchpath [-groupsearchpath groupsearchpath]

      [-useridattribute useridattribute]

      [-usernameattribute usernameattribute]

      [-groupnameattribute groupnameattribute]

      [-groupmemberattribute groupmemberattribute]

      [-userobjectclass userobjectclass] [-groupobjectclass groupclass]

      [-groupnestlevel groupnestlevel] <-o>

  -ldap -modifyserver -bindpassword PASSWORD

      [-ldapserver ] [-portnumber PORTNUMBER]

      [-servertype LDAP|AD] [-protocol LDAP|LDAPS]

      [-cert certificateFilePath] [-domainname domainname]

      [-binddn binddn] [-newbindpassword PASSWORD]

      [-usersearchpath usersearchpath] [-groupsearchpath groupsearchpath]

      [-useridattribute useridattribute]

      [-usernameattribute usernameattribute]

      [-groupnameattribute groupnameattribute]

      [-groupmemberattribute groupmemberattribute]

      [-userobjectclass userobjectclass] [-groupnestlevel groupnestlevel]

      [-groupobjectclass groupclass] <-o>

  -ldap -removeserver <-o>

  -ldap -addrolemapping -name NAME -type group|user

      -role administrator|storageadmin|operator|securityadministrator|dataprotection|localdataprotection|datarecovery|sanadmin|networkadmin|nasadmin|vmadmin

      <-o>

  -ldap -modifyrolemapping -name NAME

      -type group|user

      [-role administrator|storageadmin|operator|securityadministrator|dataprotection|localdataprotection|datarecovery|sanadmin|networkadmin|nasadmin|vmadmin]

      <-o>

  -ldap -removerolemapping

      [-name NAME -type group|user] | [-all] <-o>

  -ldap -listrolemapping [-name NAME]

  -ldap -synchronize <-o>

  -pkcs12upload -file FILE [-passphrase PASSPHRASE]

  -trustedclient [-enable yes|no <-o>]

      [-add -ipaddress ADDRESS -applyto single|all <-o>]

      [-remove <-ipaddress ADDRESS> -applyto single|all <-o>]

      [-list <-ipaddress ADDRESS> | <-showall>]

  -setport -port <80/443> | <2162/2163>

  -certificate -add -file FILENAME [-client -role Role]

  -certificate

      -remove -serialNumber SERIALNUMBER -issuer ISSUER [-client] [-o]

  -certificate -list [-client]

  -certificate -alertBeforeExpiration DAYS

  -fipsmode [-set 0|1 <-o>]|[-get]

  -SPcertificate -generate

------------------------------------------------------------------

I have also tried to remove the 'security' option since I don't really want to mess around with the security setting of the device.

./naviseccli -address 1.2.3.4 -user admin -password AAAA -scope 0 "arrayconfig capture output /opt/Navisphere/bin/Capture158.xml"

but I am getting this error:

---------------------------------------

Management Server - Feature software is not installed or the command may have been typed incorrectly

Possible commands are,

migrate           compression       connection        isns              Domain

Security          spcollect         arrayconfig       EventMonitor      ntp

modepassthru      networkadmin      server            metalun           analyzer

nqm               mirror            sancopy           clone

alpa              arraycommpath     arrayname         backendbus        baseuuid

bind              cachecard         chglun            chgrg             clearlog

clearstats        convertemlog      createrg          copytohotspare    emconfiguration

failovermode      faults            firmware          flashleds         flash

getagent          getall            getarrayuid       getcache          getconfig

getcontrol        getcrus           getdisk           getlog            getloop

getlun            getresume         getrg             getsniffer        getsp

getsptime         getunusedluns     initializearray   inserttestevent   ioportconfig

luncache          managedby         managefiles       mirrorview        ndu

port              powersaving       rebootpeersp      rebootSP          remoteconfig

removerg          resetandhold      responsetest      setcache          setfeature

setloop           setraid5          setsniffer        setspstime        setsptime

setstats          shutdown          shutdownSP        shutdownpeerSP    storagegroup

systemtype        spportspeed       trespass          unbind            unitserialnumber

environment       lun               cache             storagepool       thin

thinlun           autotiering       snap              reserved          snapview

[root@USHRHPNA001 bin]#

----------------------------------------------------

Hi Ankit,

It is:

NaviCLI-Linux-32-x86-en_US-7.31.33.0.41-1

Could you check if you can save the array config to /root directory?

# . /naviseccli -h x.x.x.x -user xxx -password xxx -scope 0|1|2 arrayconfig -capture -output

Could you please, also tell me the Model Number of the Storage System?

Okay, I just came across an article while researching on this which mentions:

If the host does not have permission to manage arrays, the CLARiiON management host entry does not display or an error displays. Make the root entry for the CLARiiON management host in the array's      privileged users list.

In order to do that:

1. Open a Web browser.

2. In the browser's address field, type the following URL and press Enter:

     http://ip_address/setup - where ip_address is the array's IP address.

3. Log on to the array with administrator-level credentials.

4. Click Set Privileged User.

5. Specify the user of the linux host:

   root@linuxhost

where LinuxHost is the name, IP address, or fully qualified domain name of the Linux host that manages the CLARiiON array.

Once, it is done try the original command and see if it works!

Hi Ankit,

I have tried your suggestion and logon to the /setup page. Unfortunately I can't find 'Set Privileged User'.

I do see the following options:

1. Manage SSL/TLS Certificate
2. Restart Management Server
3. Set Update Parametesr
4. Recover Domain
5. Turn Automange On/Off
6. Set Administration Access Restrictions
7. Set RemotelyAnywhere Access Restrictions.
8. Refresh Management Server State

I have checked (6) Set Administration Access Restrictions, and there is nothing in there at the moment.

I did not add my user@host details in there because my customer can run the command from his Windows version CLI (as I have mentioned in my first post). So if I can't see my customer user@host setting in (6), I suppose this is not the show stopper???

Regarding your questions in post #5:

The Device model is VNX5500, and the software version is 05.32.000.5.011

and from the /setup page, the top of the page shows:

MANAGEMENT SERVER VERSION V1.0.0.20/D(114619), 30-Mar-2012 08:02:18 Copyright 1995-2012, EMC Corporation - INTERNAL BUILD

-----

I am not sure if the Linux CLI expects different command syntax, as in quotes etc...

I have tried different combinations but still with no luck.

Any more suggestions?

None.

However, I have notified the Community Moderators to move this discussion to https://community.emc.com/community/support/family/vnx so that it would have more visibility to VNX Experts!

Thanks

Ankit

This discussion has been moved to the VNX Support Forum as requested by Ankit.

Regards,

Mark

Hi David,

I would suggest to open a service request so that this can be properly analyzed by EMC customer service.

You can do so by using phone or the CS chat from support.emc.com

Rainer

I apologize for re-opening a 15-month-old post, but there appear to be no other mentions of this issue anywhere on the forum.

I have a Centos 6 box, with naviseccli. I am attempting to run the following command:

[root@system tmp]# /opt/Navisphere/bin/naviseccli  -scope 1 -password PASSWORD  -h IP -user autobackup arrayconfig -capture -output test.xml

Exception: count out of bounds

[root@system tmp]#

On a Windows box:

C:\Users\drankin\Documents>naviseccli  -scope 1 -password PASSWORD  -h IP -user autobackup arrayconfig -capture -output test.xml

and I have an XML output file.

I have tried all of the following versions of the CLI:

NaviCLI-Linux-32-x86-en_US-7.33.2.0.51-1.i386.rpm

NaviCLI-Linux-64-x86-en_US-7.32.25.1.63-1.x86_64.rpm

NaviCLI-Linux-64-x86-en_US-7.33.2.0.51-1.x86_64.rpm

All three report the same results, "count out of bounds".

The rest of the command appears to be working correctly.

We have a VNX 5800, running 5.33.0.5.38 on the block device.

Any suggestions to fix this? I really need this command to run under Linux, so I can  run my config backups there.

Thanks,

David

just tried this on my box and it worked fine, SELinux disabled ?

[root@vnxrepmon1 ~]# cat /etc/redhat-release

Red Hat Enterprise Linux Server release 6.3 (Santiago)

[root@vnxrepmon1 ~]# rpm -qa | grep -i Navi

NaviCLI-Linux-64-x86-en_US-7.33.1.0.33-1.x86_64

You could trace or ldd to see if it uses other libraries or commands

I disabled SELinux, and that didn't help either.

Are there any RPMs that have to be installed before the NaviCLI rpm that perhaps the RPM doesn't call out?

(and I have entered a support ticket, so thanks for that suggestion Rainer)

David

Nope, no other RPMs were needed. Did you try a simple command like /opt/Navisphere/bin/naviseccli  -scope 1 -password PASSWORD  -h IP -user autobackup getagent

Yes, that command (and the others I've tried) all work. It's only the arrayconfig command that is not working.

Thanks,

David