RE: cimcli command error when openssl is enabled

Hi Souvik
  Thank you for the help.
Looks like it's a bug in cimuser command.

I created a cimuser with password as parameter of the command for example
>cimuser -a -u administrator -w xxx
User added successfully.

The command succeeded but all the requests failed.

But when I deleted and re created the same user with no password. The command asks for the password and conformation  pwd

>cimuser -a -u administrator
Please enter your password: *********
Please re-enter your password: *********
User added successfully.

With this all the requests are successful.

Very strange.!!!
You may want to try this on your windows setup.

Thanks
Veeresh




From: [email protected] [mailto:[email protected]]
Sent: Monday, August 01, 2011 9:26 AM
To: Yaligar, Veeresh S (USD SRDL); [email protected]
Subject: RE: cimcli command error when openssl is enabled

Hi Veeresh,
    We are using cimcli with ssl enabled cimserver successfully. Assuming you are using ssl-enabled cimcli ( built with ssl-enabled cimserver )
Please crosscheck these points:

1. check with:

    cimcli ei -n root/pg_interop cim_computersystem -l  <ip>:5989 -u administrator -p xxx  -s

     your first command is missing "-s" option.

2. what is the value of sslClientVerificationMode. If it is "disabled", that means cimom will not validate client through certificates. It will validate through user/passowrd authentication. you can check pegasus\doc\PegasusSSLGuidelines.htm for details.

3.  keeping enableAuthentication=true, is following command working?

cimcli ei -n root/pg_interop cim_computersystem -l  <ip>:5988 -u administrator -p xxx

if it gives error, that means there is a problem with authentication, not ssl feature.ssl depends on selected authentication and in this case, even http connection is also failing.

Hope one of these will help you.

Thanks,
Souvik


________________________________
From: Yaligar, Veeresh S (USD SRDL) [mailto:[email protected]]
Sent: Sunday, July 31, 2011 9:22 PM
To: [email protected]
Subject: cimcli command error when openssl is enabled
Hi
 I followed all the steps to enable openssl in cimserver on Windows 2008 machine. Created key and certificate as per documentation and also set the cimserver variables as below
httpsPort=5989
enableHttpsConnection=true
enableAuthentication=true
traceComponents=All
traceLevel=4
sslCertificateFilePath=myserver.cert
sslKeyFilePath=myserver.key

Generated a self signed certificate and added it to trust store using cimturst , cimauth and cimuser commands.
when I connect to cimom from the same machine I get following errors.
>cimcli ei -n root/pg_interop cim_computersystem -l  <ip>:5989 -u administrator -p xxx
cimcli Pegasus Exception: Connection closed by CIM Server.. Cmd = ei Object = cim_computersystem

>cimcli ei -n root/pg_interop cim_computersystem -l ip:5989 -u administrator -p xxxxx  -s --cert myserver.cert --key myserver.key
cimcli Pegasus Exception: HTTP Error (401 Unauthorized).. Cmd = ei Object = cim_computersystem



The  cimom trace show as below.

1312107386s-20595us: SSL [4828:18446744073709551614:TLS.cpp:159]: ---> SSL: Created SSL socket
1312107386s-20595us: DiscardedData [4828:18446744073709551614:TLS.cpp:371]: ---> SSL: Not accepted 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request client IP address : 15.146.152.2
1312107386s-20595us: DiscardedData [4828:18446744073709551614:HTTPAcceptor.cpp:880]: HTTPAcceptor: SSL_accept() failed
1312107386s-36220us: SSL [4828:18446744073709551614:TLS.cpp:172]: ---> SSL: Deleted SSL socket

cimcli works fine when queried on http port
>cimcli ei -n root/pg_interop cim_computersystem

Success.


Appreciate your help on troubleshooting the problem.


Thanks
Veeresh





Please do not print this email unless it is absolutely necessary.

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com