Secure Shell (SSH) in HP SIM

24
Troubleshooting
Diagnostic tool to check SSH setup
You can use t
he
mxagent
config
tool to
verify
whether SSH on the target system is configured
properly to be used with HP SIM. This option verifies whether the SSH connection can be successfully
authenticated for the specified user using the HP SIM user public key and host
-
based a
uthentication
methods. If the authentication is successful, HP SIM
can
issue
tools on the target system.
U
se
the following syntax
from the CMS platform:
mxagentconfig
–
c
–
n targetsystemname
–
u username
Checklist to debug SSH on Windows
The following check
list
can
help
you
identify the cause of any problems
that
you find with running
SSH tasks on Windows.
I
t is important
that
you are running the latest version of HP SIM and the latest
version of OpenSSH for HP SIM.
1.
What user name are tasks to run as?
This
is a key question
because
this user must be configured for SSH access
on the target
managed system. You can specify t
he user
in the tool
, although some tools run as the user
signed into HP SIM. The user
appears
on the
Task Results
page.
Tools supplied
by HP SIM to run on Windows systems will specify the Administrator user.
These tools can run as an alternate user if the administrator
is
renamed or disabl
ed. Look at
the WindowsAdminUserName property to determine the user name:
> mxglobalsettings
-
ld Win
dowsAdminUserName
WindowsAdminUserName = MyAdmin
2.
Is this user name valid?
Verify
the operating system to ensure that the user from step 1 is a valid Windows account
that can log into the target system.
Verify
the Administrators group of the target system
to ensure that this user is a member
because only administrators can use the OpenSSH supplied by HP SIM.
IMPORTANT:
Domain users must be explicit members of
the local Administrators group.
T
he OpenSSH supplied by HP SIM does not
verify
membership of dom
ain
groups when determining access permission.
Some tools supplied by HP SIM must run other tools as part of their operation. To do this, the
user must be a valid HP SIM user with authorizations for the target systems.
Verify
the HP SIM