Question & Answer
Question
What prevents the probe user connecting to the object server in a secure environment?
Cause
The object server is configured in SecureMode, which means clients need to authenticate correctly against the object server.
For example.
SecureMode: TRUE
Answer
Check connectivity.
nco_ping AGG_P
NCO_PING: Server available.
NCO_PING: Server available.
nco_sql -server AGG_P -user probeuser -password ''
Failed to connect
Error: Failed to get login token
Failed to connect
Error: Failed to get login token
Check the network works for the root user:
nco_sql -server AGG_P -user root -password ''
1> describe alerts.status;
2> go
ColumnName Type Size Key
...
1> describe alerts.status;
2> go
ColumnName Type Size Key
...
The probe user requirement is an enabled user, who is a member of the Probe group.
Check the user is enabled:
select UserName,UserID,Enabled from security.users where UserName = 'probeuser';
go
go
If user is disabled, enable the user:
alter user 'probeuser' set Enabled true;
go
Reapply the users password and group requirements, adding ISQL to check login:
alter user 'probeuser' set password 'netcool';
go
alter group 'Probe' assign members 'probeuser' ;
alter group 'ISQL' assign members 'probeuser' ;
go
go
alter group 'Probe' assign members 'probeuser' ;
alter group 'ISQL' assign members 'probeuser' ;
go
Find the GID's for the required groups to see their members;
select * from master.groups where Name in ('Probe','ISQL');
go
go
Name GID
Probe 4
ISQL 7
Probe 4
ISQL 7
Select the given user from security.users:
select UserID from security.users where UserName = 'probeuser';
go
UserID
1234
go
UserID
1234
Select the Groups who have the given users UserID in their list:
select GID from master.members where UID = 1234;
go
go
GID
-----------
0
4
7
-----------
0
4
7
Recheck the probe user:
nco_sql -server AGG_P -user probeuser -password ''
1> describe alerts.status;
2> go
ColumnName Type Size Key
...
2> go
ColumnName Type Size Key
...
If everything is set correct, and there is a still a problem, confirm the root user can be used:
AuthUserName : "root"
AuthPassword: ''
AuthPassword: ''
Note:
The trigger disable_user disables uses, make sure this is not disabling the user if the user was found to be disabled and keeps being disabled.
Once the tests are complete remove ISQL access from the probe user.
alter group 'ISQL' remove members 'probeuser' ;
go
alter group 'ISQL' remove members 'probeuser' ;
go
[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSSHTQ","label":"Tivoli Netcool\/OMNIbus"},"ARM Category":[{"code":"a8m500000008ZurAAE","label":"Probes->Common features and tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
28 June 2021
UID
ibm16467597