UNSOLVED

darekwj

updated

12 years ago

D

darekwj

1 Rookie

•

44 Posts

0

12949

July 28th, 2014 03:00

naviseccli –AddUserSecurity issue

Hi,

I need to add additional host with naviseccli to my environment that currently is built with  two VNXs and two Unisphere servers - dual site located. I created local operator account on VNXes, and now I would like to setup naviseccli security files (xml and key) on additional host.

I do not know how to override the error I get when executing:

naviseccli -address -User -Password -Scope 0 –AddUserSecurity

Error returned from the Management Server on SPA/SPB IP

Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

The username and passwd is OK. Should I prepare some initial security file manually or copy it from another server to create security files for my operator account?

Regards

--

Dariusz

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    4057

    0

    Posted July 28th, 2014 03:00

    VNX or VNXe ?  As far as i know naviseccli is for VNX only.

  • Roger_Wu

    6 Operator

    •

    4025 Posts

    4057

    0

    Posted July 28th, 2014 17:00

    Does the Navisphere CLI work normally before you create the security file?

    For example, try the command "naviseccli -address -User -Password -Scope 0 getagent "

    Navisphere CLI is for Block storage, such as CLARiiON and VNX.

  • darekwj

    1 Rookie

    •

    44 Posts

    4057

    0

    Posted July 29th, 2014 01:00

    Hi,

    CLI works fine on my production servers but only when I do not provide it with -User .

    The cert store has been initially configured there, and the xml and key files are already present there.

    naviseccli -address SP_IP -User -Password -Scope 0 getagent
    Error returned from the Management Server on IP
    Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

    On my new server it does not work at all:

    naviseccli -address SP_IP getagent
    Security file not found.  Already removed or check -secfilepath option.

    My aim is to create xml and key for new operator account.

  • rewalmilo

    1 Rookie

    •

    62 Posts

    4057

    0

    Posted July 29th, 2014 03:00

    Please try this format

    naviseccli -h SP_IP -User -Scope 0 getagent

  • darekwj

    1 Rookie

    •

    44 Posts

    4057

    0

    Posted July 29th, 2014 05:00

    Still the same error:

    Error returned from the Management Server on Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    4057

    0

    Posted July 29th, 2014 05:00

    if my memory serves me right you can't re-use the security file created for other users, even if it's on the same machine. Security file is unique to each user profile for that specific machine. Not sure if that has anything to do with your issues.

  • Shanmugas

    1 Rookie

    •

    22 Posts

    4057

    0

    Posted July 29th, 2014 13:00

    Do -RemoveUserSecurity and clear existing cache and then re-run. Just make sure you enter global/local as per your setup.

  • darekwj

    1 Rookie

    •

    44 Posts

    4057

    0

    Posted July 30th, 2014 07:00

    It is brand new server installation. No security credentials files were created at the time of installing NaviCLI.

    There is no old security file definition.

    naviseccli -address IP –RemoveUserSecurity

    Security file not found.  Already removed or check -secfilepath option.

  • darekwj

    1 Rookie

    •

    44 Posts

    4057

    0

    Posted August 6th, 2014 01:00

    What is the whay to clear the cache ?