Dear All, I am trying to discover a windows host using administrative credentails and required ports are open. Eventhough the given credentails are correct, the discovery is ending with BAD Credentails. Below is the error, Could anyone suggest the issue please ? [2016-07-12 09:03:02.464] INFO [com.hp.se.collector.direct.core.connection.ssh.SSHLiveConnectionImpl] Live Command Logging is Disabled for com.hp.se.devices.windowsagentless [2016-07-12 09:03:02.464] INFO [com.hp.se.collector.direct.core.CollectorBase] Will start connection Initialization and Verification for com.hp.se.devices.windowsagentless [2016-07-12 09:03:02.571] INFO [com.hp.se.collector.direct.core.connection.jinterop.JinteropLiveConnectionImpl] Will attempt to destroy connections for 10.151.12.179 [2016-07-12 09:03:02.571] WARNING [com.hp.se.collector.direct.core.connection.jinterop.JinteropLiveConnectionImpl] Could not initializing Windows Agentless Bundle Connection: for 10.151.12.179.Message not found for errorCode: 0x00000005 [2016-07-12 09:03:02.571] INFO [com.hp.se.collector.direct.core.CollectorBase] Connection Initialization Completed successfully...Attempting Verify for 1 Connections [2016-07-12 09:03:02.572] WARNING [com.hp.se.collector.direct.core.connection.jinterop.JinteropLiveConnectionImpl] LOGIN failed for Windows Agentless Bundle Connection: 10.151.12.179. Error executing query Error executing queryROOT\CIMV2:Select * from Win32_ComputerSystem on 10.151.12.179 [2016-07-12 09:03:02.572] WARNING [com.hp.se.collector.direct.core.CollectorBase] Failed for init connection on JINTEROP-1 [2016-07-12 09:03:02.573] INFO [com.hp.se.collector.direct.core.connection.jinterop.JinteropLiveConnectionImpl] Will attempt to destroy connections for 10.151.12.179 [2016-07-12 09:03:02.573] WARNING [com.hp.se.disco.dn.task.DefaultJobExecutor] Job 1468332182821 terminated with an error BAD_CREDENTIALS cause of com.hp.se.disco.common.task.exceptions.DataCollectorException: Invalid discovery credentials !! at com.hp.se.disco.dn.dc.InventoryExecutor.work(InventoryExecutor.java:147) at com.hp.se.disco.dn.dc.InventoryExecutor.work(InventoryExecutor.java:28) at com.hp.se.disco.dn.task.DefaultJobExecutor.doService(DefaultJobExecutor.java:50) at sun.reflect.GeneratedMethodAccessor1795.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:497) at org.jboss.aop.joinpoint.MethodInvocation.invokeTarget(MethodInvocation.java:122) at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:111) at org.jboss.ejb3.interceptors.container.ContainerMethodInvocationWrapper.invokeNext(ContainerMethodInvocationWrapper.java:72) at org.jboss.ejb3.interceptors.aop.InterceptorSequencer.invoke(InterceptorSequencer.java:76) at org.jboss.ejb3.interceptors.aop.InterceptorSequencer.aroundInvoke(InterceptorSequencer.java:62) at sun.reflect.GeneratedMethodAccessor488.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:497) at org.jboss.aop.advice.PerJoinpointAdvice.invoke(PerJoinpointAdvice.java:174) at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:102) at org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor.fillMethod(InvocationContextInterceptor.java:74) at org.jboss.aop.advice.org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor_z_fillMethod_996301815.invoke
Hello Dieter, Thanks for the update. I already installed psexec and ran the womwindowsagentlessdiscovery command successfully. It seems there is an issue while copying executable files to Windows host. In the C:windows\system32\ the .exe files are not copied. Will there be any problem with the connection to windows hosts from SOM.(135 port is already opened)
Hello Mark, Dieter I have enabled port 135 on windows hosts and also on SOM server, WMI service enabled. When I run somwindwosagentlessdiscovery.ovpl -i command, it ran without any error, But the DcomConfigurator_x64.exe,DcomConfigurator_x86.exe and hbatest.exe files were NOT copied to folder C:\Windows\System32 (Or C:\Windows\) on the Windows host. So, I manually copied these files and executed DcomConfigurator_x64.exe,DcomConfigurator_x86.exe on windows host. But even after this, Discovery is not successful. Could you suggest me to troubleshoot this issue ?
I'm sorry that things are still now working. I've encountered a similar problem with another customer and it was due to security settings that was preventing the discovery from being successful. The other customer stopped pursuing the issue at that point, so we never discovered the root cause.
To help continue troubleshooting with your issue, I would suggest the following:
Confirm if you can use Wbemtest to connect to the remote Windows host from the SOM Management Server if the SOM Management server is a Windows system.
Confirm that the files (hbatest.exe, DcomConfigurator_x64.exe, DcomConfigurator_x86.exe) are located within the C:\Windows directory.
I did some testing within my lab last year with this process and found the following items. - It is not required to specify the domain name with the credentials when performing the discovery of the host. - If Windows Firewall is enabled (Domain) before the registry changes, then it will fail with the ‘Bad_Credentials’ message. - The DComConfigurator.exe binary does the following: o Changes permissions for the registry key. o Adds an entry to the registry key.
Prior to attempting the discovery, I took screenshots and backups of the registry key “HKEY_CLASSES_ROOT\WOW6432Node\CLSID\76a64158-cb41-11d1-8b02-00600806d9b6”. After running the “somwindowsAgentlessDiscovery.ovpl –I” command, I looked at the registry entry again and noticed what changed in regards to permissions.
Depending on the results of these tests and possibly the security policies within your environment, it may not be possible to use the Windows Agentless Discovery.
You will need to open a support case if you need further assistance beyond this information.
I hope that this information is helpful.
--- Mark Butler Micro Focus SW Support Engineer https://softwaresupport.hpe.com/
Hi Mark ,Thanks for your reply. Wbemtest to connect to the remote Windows host is not successful. hbatest.exe, DcomConfigurator_x64.exe, DcomConfigurator_x86.exe are located in the C:\Program Files (x86)\HP\HP BTO Software\newconfig\HPOvSEi\tools\thirdparty on my Windows SOM and these files neither copied to C:\Windows\system32 nor C:\Windows on Windows host after running the discovery script. I tried the without the domain name in the user credentails credentials. I also doubt on some restrictions on Windows hosts to make these changes. Let me open a case with the support team.
Hi Mark, I tried to connect to the Wondows hosts using wbemtest from my Windows SOM server. It it throwing an error as access denied, But I have a confirmation from Firewall team that port 135 is passed. This wbemtest will use any other port apart from 135 ? Moreover, With the Error logs, I could locate the error code : 0x00000005 . For this Error code, troubleshooting steps in User's guide is to manually copy the dcomconfigurator_x86, dcomconfigurator_x64 and hbatest files to the windows hosts and run the discovery. But it's not yet successful. Do we have any sucessful discovery of Windwos2012 server using SOM10.10.170 ? Thanks, Hari
I just created a Windows 2012 R2 system to test out from my Windows 2012 R2 SOM 10.10 management server. Both systems are within the same lab environment and there are no network firewalls between them. The only firewalls involved is the Windows Firewall settings.
I did not configure anything within SOM, but kept my test strictly related to WMI.
I attempted to use wbemtest to connect to the client system and I put in the following entries:
Hi Mark, Thanks for testing in your lab. I followed the same stpes you suggested to allow WMI on Windows Host. But I encountered the same error after the suggested changes. Namespace: \\\root\cimv2 (I trired with both IP and FQDN, But same error) User: administrator Password: Number: 0x800706ba Facility: Win32 Description: The RPC server is unavailable. (Do I need to restart some server properties to affect these changes ? ) When I check the Remote Procedure Call(RPC) Locator its status is Running on Windows Host. Moreover, Remote Procedure Call(RPC) & Remote Desktop Services UserModel Port Redictor are also in Running state. Thanks, Hari
No, you do not need to restart the server for these changes to take affect.
If these servers are within the same domain, you can use the short name instead of the FQDN. In either case, it should work if the firewall settings are correct.
I suspect that there is still something preventing WMI communication between the servers. At this point, you may need to work with your Windows Admins and your Network Admins to troubleshoot the issue further. At this point, it is not related to an issue with HPE Software but is related to Windows.
I'm sorry that I cannot help you any further at this point.
Good luck with your efforts.
--- Mark Butler Micro Focus SW Support Engineer https://softwaresupport.hpe.com/
Hi Mark, One quick question please, Do we need to open 445 port inoder to copy docconfigurator and hbatest files to windows server ? As per my understanding it is required only while installing psexec tool. Thanks, Hari