Unisphere for VMAX: REST API calls fail.
Summary: Unisphere for VMAX: REST Application Programming Interface (API) calls fail.
Symptoms
REST API calls fail. Baseboard Management Control (BMC) Capacity Optimization (BCO) is a tool that uses REST API calls to query information from Unisphere to report to the BCO user interface (UI).
BCO shows no data for Symmetrix. BCO is configured to gather information from Unisphere for VMAX (UNIVMAX) as the Perfmon user.
In this instance, BMC's BCO tool tried to query information from Unisphere and received the following error:
Response: HTTP/1.1 403 Forbidden Server: Apache-Coyote/1.1 Date: Wed, 02 Mar 2016 15:58:55 GMT Accept-Ranges: bytes Server: Restlet-Framework/2.1.2 RESTAPI-PROCESSING-TIME: 22 RESTAPI-ACTIVE-SESSION-COUNT: 2 Content-Type: application/xml Transfer-Encoding: chunked <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <exception xmlns="http://www.emc.com/em/2012/07/univmax/restapi/common" xmlns:ns2="http://www.emc.com/em/2012/07/univmax/restapi/management" xmlns:ns3="http://www.emc.com/em/2012/07/univmax/restapi/mobile" xmlns:ns4="http://www.emc.com/em/2012/07/univmax/restapi/performance" message="User is not authorized for symmetrixId [000xxxxxxxxx]"/> Request: POST https://<UNIVMAX_SERVER_IP>:8443/univmax/restapi/performance/FEDirector/keys HTTP/1.1 Accept-Encoding: gzip,deflate Content-Type: application/xml Accept: application/xml Content-Length: 280 Host: UNIVMAX_SERVER:8443 Connection: Keep-Alive User-Agent: Apache-HttpClient/4.1.1 (java 1.5) Cookie: JSESSIONID=bRaJZl6VUZbus-6yWmD0FZa8 Cookie2: $Version=1 Authorization: Basic <REDACTED> <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <ns2:feDirectorKeyParam xmlns="http://www.emc.com/em/2012/07/univmax/restapi/common" xmlns:ns2="http://www.emc.com/em/2012/07/univmax/restapi/performance"> <symmetrixId>000xxxxxxxxx</symmetrixId> </ns2:feDirectorKeyParam>
RESTAPI calls from a Mozilla Firefox client to Unisphere for VMAX failed when using a Perfmon user. This works fine with an Admin (smc) user.
Cause
Resolution
To address this issue, ensure the username (case sensitive) is correctly added to the Symmetrix authorization list (symauth list -users -sid xxx) with appropriate privileges.
Additional Information
In this instance, the username had a hostname prefix, which caused the issue. Removing the hostname prefix from the symauth list for that user resolved the issue.
Users who are allowed access to the Symmetrix performance metrics:
- Administrator
- Storage Administrator
- Performance Monitor
- Monitor
Users who are not allowed access to the Symmetrix performance metrics:
- Auditor
- Security Administrator
- None
Refer to the Unisphere for VMAX RESTAPI Programmer's Guide for details. The documentation can be found on Dell EMC Online Support at https://www.dell.com/support/product-details/en-us/product/unisphere-for-vmax/docs