Hello,

I'm unable to connect VNX5300 via GUI (USM/SP) using sysadmin account while ssh to CS using root is fine. Apparently naviseccli can talk to spa/spb.

As you can see below the spa/spb complains that security is not initalized. If I try to create a new administrator user (ie: sysadmin2) it says that credential on control station is invalid.

Any help or suggestion to fix this is really appreciated!

(also https://[spa|spb]/setup reports "Domain Security Uninitialized - Please initialize the security using Unisphere or Naviseccli")

Thank you, Andrea

 

[nasadmin@emc2-cs0 ~]$ naviseccli -h spa getagent

Agent Rev: 7.32.33 (9.2)
Name: K10
Desc:
Node: A-CKM00122601488
Physical Node: K10
Signature: 3244558
Peer Signature: 3244576
Revision: 05.32.000.5.249
SCSI Id: 0
Model: VNX5300
Model Type: Rackmount
Prom Rev: 7.20.00
SP Memory: 8192
Serial No: CKM00122601488
SP Identifier: A
Cabinet: DPE8

[nasadmin@emc2-cs0 ~]$ naviseccli -h spa security -list
Security is not initialized. Add a global administrator to initialize security.
[nasadmin@emc2-cs0 ~]$
[nasadmin@emc2-cs0 ~]$ naviseccli -h spa security -adduser -user sysadmin2 -password sysadmin2 -scope global -role administrator -type system
WARNING: You are about to add user: sysadmin2

Proceed?(y/n) y
Add user operation failed. The internal credential to the Control Station is invalid.
Log in to the Control Station as root and run /nas/http/bin/set_passphrase IP_SP
[nasadmin@emc2-cs0 ~]$
[nasadmin@emc2-cs0 ~]$
[nasadmin@emc2-cs0 ~]$ su
Password:
[root@emc2-cs0 nasadmin]#
[root@emc2-cs0 nasadmin]# /nas/http/bin/set_passphrase 10.58.11.198
/nas/sbin/classic_navicli -np -h 10.58.11.198 getagent 2>&1
Error returned from Agent
Agent denied request -- Caller not privileged.

/nas/sbin/classic_navicli [-p] [-v|q] [-m] [-np] [-t timeout] [-h hostname]
[-d device] [-help] [-f filename] CMD

Possible commands are:
alpa arrayname arraycommpath bind baseuuid
cachecard chglun chgrg clearlog clearstats
createrg emconfiguration failovermode
flashleds firmware getagent getall getarrayuid
getatf getcache getconfig
getcontrol getcrus getdisk getlog getloop
getlun getresume getrg getsniffer getsp
getsptime initializearray inserttestevent luncache
lunmapinfo managedby managefiles mirrorview ndu
networkadmin port r3wrbuff readcru readlun
rebootSP register removerg reserved responsetest
remoteconfig sancopy setcache SC_OFF setloop
setraid5 setsniffer setspstime setsptime setstats
shutdown snapview storagegroup systemtype spcollect
spportspeed trespass unbind unitserialnumber
upload setfeature

Too few or invalid command line parameters

Unable to set passphrase.
[root@emc2-cs0 nasadmin]#