Secure Shell (SSH) in HP SIM

Mydomain
\
MyUser@targethost’s Password:****
because you do not have sufficient privileges. Be sure that the specified user is a direct member of the
Administrators group on the target system and remember that membersh
ip of a domain group is not
sufficient for OpenSSH. This can be achieved by running
the
following command on the target
system:
net localgroup administrators MyDomain
\
MyUser /add
If the SSH command
issues
following error message:
setgid: Invalid argument
T
his
message appears because
the group id of the user is not in SSH server’s group file. In most
situations,
the
domain groups
were
not added to the group file. Log in to the target system with an
account that has domain access and run following command to
add the domain groups into the SSH
server’s group file:
mkgroup
–
d >> <openssh install dir>
\
etc
\
group
Problem: mxagentconfig fails to authenticate with Suse Linux Enterprise Server 9
Ssh Operation failed for node:harrison. password authentication
faile
d:FAILED
Completed with errors.
SuSE Linux Enterprise Server 9 ships with SSH configured to use PAM authentication instead of
password authentication.
The
mxagentconfig
command
requires password authentication. To
enable password authentication, modify the
following lines in
/etc/ssh/sshd_config
of the
target system:
PasswordAuthentication yes
#UsePAM yes
Then
,
retrieve the sshd pid from file
/var/run/sshd.pid
and restart sshd by using following
command:
kill
-
SIGHUP <sshd'spid>
Troubleshooting
sshuser erro
rs
Problem: no output from sshuser
Running sshuser for a domain user should return an entry that can be added to the
passwd
file:
> sshuser
-
d mydomain
-
u myuser
mydomain
\
myuser:unused_by_nt/2000/xp:9159:513:WMI,U
-
OPENVIEW
\
wmi,S
-
1
-
5
-
21
-
27163274
-
143742939
-
1
512734326
-
9159:/cygdrive/C/Documents and
Settings/hpsimssh:/bin/switch
No output is returned if you do not have sufficient rights to access the domain, used by sshuser to
obtain the user’s SID.
L
og in to the managed system as a domain account and re
-
run ss
huser.
Errors running tasks
When you have a problem executing a task, one of the following might be the cause:

The SSH server on the managed system on which you are trying the command is not available
.

The user running the command is not authorized to lo
gin through SSH to the managed system
.

The user trying to run the command does not have the HP SIM authorizations to run this tool on that
managed system
.
Follow the checklist given earlier to debug the SSH connection to the target system. Most importantly
,
make sure the user trying to run the command is the correct user. Sometimes the tool is designed to be
run by a particular user such as root or Administrator. Other tools are designed to be run by the user
who is logged into the CMS.