Active IQ Unified Manager Discussions

enable rbac sdcli dfm_config

daehnrich_bsh
5,643 Views

Hello,

i try to enable rbac with my dfm/snapdrive. Since it is impossible to copy paste here anything. i added a file with the Problem.

The User is added on DFM Server with GlobalFullControl.

What i make wrong? I my eventlogs i found no additional Infos.

thanks

12 REPLIES 12

arjunan
5,612 Views

hi,

following are the steps to configure,

- SDW needs to be installed with the DFM server settings like DFM  server name/ IP Address, User name, PWD. ( The Username should at the least have  DFM.Core.AccessCheck in the global scope on the DFM )

are you sure you have given the user name with the DFM.Core.AccessCheck permission.

then try to set SDW with the information.

thanks, Prabu

daehnrich_bsh
5,612 Views

Hi,

the User has DFMGlobal Full Control.

EU.BSHG.COM\MCH-sds_tdfmGlobalFullCo...

regards Soeren

kjag
5,612 Views

Hi,

Is the hostname (mchwtdfm01 ) of DFM is pingable from the SDW machine?

-KJag

daehnrich_bsh
5,612 Views

Its on the same System, and i tried also with IP. And yes its pingable.

prasads
5,612 Views

DFM Zapi failed to connect to the DFM server 'mchwtdfm01'.

To me this means that the user who is running the SDW service is not able to connect to the DFM server.

Can you please check the below points on the DFM server

Make sure DFM server is running & using port no. 8088

(Run the below commands & check

dfm service list

dfm option list serverHTTPPort)

daehnrich_bsh
5,612 Views

well, all services running and http port is 8088

arjunan
5,612 Views

if DFM is windows machine,

make sure you have created a same user under Local Users and Groups in windows.

creating a  user in DFM doesnt create a user in windows,

also you can use the following command.

sdcli dfm_config set -host mchwtdfm01 -user MCH-sds_tdfm -pwd XXXXX

no need to give domain name too. try this hope it works.

thanks, Prabu

daehnrich_bsh
5,616 Views

DOH! i forget this Point, i will do it after Eastern and try again and give then full pts. Thanks for the hint.

daehnrich_bsh
5,612 Views
DFM authenticates users based on the operating system it is installed on and expects an existing user in the environment.

Solution


Windows environment:
Specify a user local to the Windows Server, a Domain user or group.

Anyway, i createt a user local on the System and put him direct to the Administrators. dfm user add  username

But i still get the error.

arjunan
5,074 Views

you mean still you are facing the issue ????

daehnrich_bsh
5,074 Views

yes.

Creating ConfigManagement web service client...


A FaultException<SDResult> occurred:

DFM Zapi failed to connect to the DFM server 'mchwtdfm01'.

The operation completed successfully.

sswain123
5,078 Views

I just encountered the exact same error when running the command: "sdcli dfm_config set -host <dfm_server> -user <domain>\<user_name>"...

  A FaultException<SDResult> occurred:

  DFM Zapi failed to connect to the DFM server '<dfm_server>'.

  The operation completed successfully.

I tried adding my user acct to the local admin group on the Windows server, my user also has GlobalFullControl to the DFM server...  didn't seem to work.  So, I re-read this thread and removed the Domain name from the cmd as suggested by Prabu and it worked.

Public