HPE Storage Users Group https://www.3parug.com/ |
|
UpdateVV Script Prompting for Authentication https://www.3parug.com/viewtopic.php?f=17&t=2530 |
Page 1 of 1 |
Author: | jayce75 [ Wed May 17, 2017 12:57 pm ] |
Post subject: | UpdateVV Script Prompting for Authentication |
I'm working on editing a script that will accept a parameter for Virtual Volume pattern, take that pattern, export a list of all of the virtual volumes (in this case these are snapshots/virtual copies) with that pattern, and refresh the snapshots. The script is accepting the parameter and generating/exporting the list of virtual volumes with that specific pattern without a problem, however when it attempts to run updatevv, I'm being prompted for authentication - username and password. I already have an encrypted pwfile in the same directory as the script (as well as in the 3PAR CLI\bin directory) - and I believe that it's working because it's logging in and performing the showvv correctly, however I can't figure out why it seems to ignore the specified pwfile when it attempt to actually refresh the snapshots. Has anyone run into anything like this before? |
Author: | Richard Siemers [ Wed May 17, 2017 2:27 pm ] |
Post subject: | Re: UpdateVV Script Prompting for Authentication |
If I recall correctly, updatevv requires that the user executing the command be a local user to the 3par and not a AD/LDAP account AND/OR you may need to check into setuseracl to allow updatevv to work on those VVs. I am shooting from the hip, its been 2ish years since we set things up for auto snap-refreshes. |
Author: | jayce75 [ Thu May 18, 2017 7:11 am ] |
Post subject: | Re: UpdateVV Script Prompting for Authentication |
I have a local user on the 3par named scripts and the encrypted pwfile has the array info and credentials for that user already set. The showvv portion to export the volumes with a specific volume pattern works without any issue - and the encrypted pwfile works with other scripts without any issues so I know the file itself is good. I've also tried with a known working pwf file with a user that has the super role and I still get prompted. |
Author: | Richard Siemers [ Thu May 18, 2017 9:26 am ] |
Post subject: | Re: UpdateVV Script Prompting for Authentication |
You have confirmed that authentication (username/password) is working ok, but still need to verify authorization to use updatevv is configured. I suspect your user privileges are not high enough to allow updatevv, so its prompting for new authentication to give you chance to provide a username/pass that has higher permissions. Check your acl setup with showuseracl to verify "scripts" can updatevv on your VVs. Example - user snapdemo has been granted updatevv rights on all VVs whos name start with VMWARE_DEV_* Code: T800 cli% showuseracl
User Operation Object_Names_or_Patterns snapdemo updatevv VMWARE_DEV_* |
Author: | jayce75 [ Thu May 18, 2017 11:42 am ] |
Post subject: | Re: UpdateVV Script Prompting for Authentication |
The acl shows that is has updatevv * under Object Names or Patters - I'm assuming that means that it has permissions to run against all objects |
Author: | Richard Siemers [ Thu May 18, 2017 3:42 pm ] |
Post subject: | Re: UpdateVV Script Prompting for Authentication |
That's my understanding as well. If the ACL is right, and the credentials work, I am stumped and would be on the phone with HPe support for better or worse. |
Page 1 of 1 | All times are UTC - 5 hours |
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |