Re: BSM Omi - Operations Integration (1833 Views)
Reply
Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 1 of 14 (2,002 Views)
Accepted Solution

BSM Omi - Operations Integration

Hello,

 

We have a Operations server (8.16), with a Master of masters arquitecture.
And a BSM (9.23), with OMi. The objective is to have all the events in BSM.

 

I am already receiving some of the Operations' events (not all, as we are still testing).

 

However, I am getting hundreds of the following events:

 

"

Event Forwarding Gateway server PKPPSG37.PTPortugal.corpPT.com is unable to reach server pcppsg14.ptcom.corppt.com due to the following error:
'BBC target server 'pcppsg14.ptcom.corppt.com' reset the connection. This may be as a result of the target server not trusting the Gateway server SSL certificate. Please use 'ovcert -trust' or BBCTrustServer on the target server 'pcppsg14.ptcom.corppt.com' to re-establish trust between the target server and the Gateway server. Further details on establishing a Trust Relationship for a server connection may be found in the online help. Details: java.net.SocketException: Connection reset'
An update for event 'EventID: 0x0000044C (1100) - Request 'pt...' (0b3ea490-7c66-71e3-1161-0aa2d4560000) cannot be delivered at this time. The request will be retried continuously until the forward request expires. According to the Operations Management Event Forwarding Expiration infrastructure setting of 1 hour(s), this request is estimated to expire in 0 hour(s) and 0 minute(s) from the time this event has occurred. At the time of this event the queue this request is on has 477"

Now for the configuration.
The main server (pcppsg14), using the bbcutil -ping trusts the bsm server (pkppsg37).
Same is true the other way around.

Connected servers configuration also has a "quirk": The "server properties" tab, when I test connection, gives me an error:

"Ping failed due to the following error: The service residing on server '10.162.103.120', could not be accessed at this time due to an error communicating with the server. Please try again later, or contact your administrator for additional details."
BUT on the "Outgoing connection", testing passes with no problems.

Upgrading Operations is seriously out of the question. And the Operation slaves are from version 7 to 9, and the integration works perfectly fine in all those cases.

I'm missing something... what?

HP Expert
PatWest
Posts: 836
Registered: ‎03-06-2008
Message 2 of 14 (1,968 Views)

Re: BSM Omi - Operations Integration

hi,

 

Make sure that on the OM Windows 8.16 server you have the following patches:

 

Server Patch OMW_00090 or higher
Accessories Patch OMW_00092 or higher


+ one of the following HP Operations Agent versions:

 

 HP Operations Agent 8.60.501
 HP Operations Agent 11.02.011 or higher

 

Hope this helps,
PatW

Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 3 of 14 (1,954 Views)

Re: BSM Omi - Operations Integration

My operations guy says the server has the patch and the agent version.

Any ideas as to what is the root cause of this (or possible root causes) so I can try and analyze what's wrong?
They are in the same network, so firewall shouldnt be a problem. Tested the routes, they seem to be ok,

HP Expert
PatWest
Posts: 836
Registered: ‎03-06-2008
Message 4 of 14 (1,943 Views)

Re: BSM Omi - Operations Integration

hi,

 

The trust might be broken between the two servers, here is a way to set it up again.

 

1. On the BSM Gateway server, execute the following command: ovcert -exporttrusted -file omi.cer.

 

2. On the OMw machine, execute the following command: ovcert -exporttrusted -file omw.cer.

 

3. Copy omw.cer from the OMW machine to the Gateway server.

 

4. Copy omi.cer from the Gateway Server to the OMW server.

 

5. On the Gateway Server, execute the following commands:

 

ovcert -importtrusted -file omw.cer
ovcert -importtrusted -file omw.cer -ovrg server.

 

6. On the OMW, execute the following commands:

 

ovcert -importtrusted -file omi.cer
ovcert -importtrusted -file omi.cer -ovrg server.

 

7. In BSM, verify if all test work in "Connected Servers"

 

8. Configure the OMW flexible mgt forwarding policy is correct.

 

Hope this helps,
PatW

 

Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 5 of 14 (1,936 Views)

Re: BSM Omi - Operations Integration

Operations Master:



D:\>ovcert -importtrusted -file omi.cer
WARNING: Certificate with alias 'CA_0636ae02-5867-7534-10b9-9a52be06f07d' is
already installed.
WARNING: Certificate with alias 'CA_0f789d22-6acd-7543-1c71-c406bdbe5ed9' is
already installed.
WARNING: Certificate with alias 'CA_10f86ac2-93ac-7560-141b-a22033186956' is
already installed.
WARNING: Certificate with alias 'CA_2f6e44c2-af9a-7547-1c47-df3d6e0b0381' is
already installed.
WARNING: Certificate with alias 'CA_3d5877e2-51ab-754e-19ae-a6fb1df468c7' is
already installed.
WARNING: Certificate with alias 'CA_a646a6f2-9aea-7552-1f1c-ca90fd2c23e2' is
already installed.
WARNING: Certificate with alias 'CA_dc4e4ba2-b7da-7553-1d21-bb270e945df1' is
already installed.
INFO: Import operation was successful.

D:\>ovcert -importtrusted -file omi.cer -ovrg server
WARNING: Certificate with alias 'CA_0636ae02-5867-7534-10b9-9a52be06f07d' is
already installed.
WARNING: Certificate with alias 'CA_0f789d22-6acd-7543-1c71-c406bdbe5ed9' is
already installed.
WARNING: Certificate with alias 'CA_10f86ac2-93ac-7560-141b-a22033186956' is
already installed.
WARNING: Certificate with alias 'CA_2f6e44c2-af9a-7547-1c47-df3d6e0b0381' is
already installed.
WARNING: Certificate with alias 'CA_3d5877e2-51ab-754e-19ae-a6fb1df468c7' is
already installed.
WARNING: Certificate with alias 'CA_a646a6f2-9aea-7552-1f1c-ca90fd2c23e2' is
already installed.
WARNING: Certificate with alias 'CA_dc4e4ba2-b7da-7553-1d21-bb270e945df1' is
already installed.
INFO: Import operation was successful.


BSM Gateway:

D:\>ovcert -importtrusted -file omw.cer
WARNING: Certificate with alias 'CA_0636ae02-5867-7534-10b9-9a52be06f07d' is
already installed.
WARNING: Certificate with alias 'CA_0f789d22-6acd-7543-1c71-c406bdbe5ed9' is
already installed.
WARNING: Certificate with alias 'CA_10f86ac2-93ac-7560-141b-a22033186956' is
already installed.
WARNING: Certificate with alias 'CA_2f6e44c2-af9a-7547-1c47-df3d6e0b0381' is
already installed.
WARNING: Certificate with alias 'CA_3d5877e2-51ab-754e-19ae-a6fb1df468c7' is
already installed.
WARNING: Certificate with alias 'CA_a646a6f2-9aea-7552-1f1c-ca90fd2c23e2' is
already installed.
WARNING: Certificate with alias 'CA_dc4e4ba2-b7da-7553-1d21-bb270e945df1' is
already installed.
ERROR: Import operation failed. The given certificate(s) could not be
installed.

D:\>ovcert -importtrusted -file omw.cer -ovrg server
WARNING: Certificate with alias 'CA_0f789d22-6acd-7543-1c71-c406bdbe5ed9' is
already installed.
INFO: Import operation was successful.

At first glance, the events seem to have stopped for the operations master server.
However, I am still getting them for the slave operations servers. Shouldn't BSM only be connected to the OMW Master? Or do I need to configure as connected servers the slaves, too?

Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 6 of 14 (1,931 Views)

Re: BSM Omi - Operations Integration

Could this be an issue with the Operations master being the certificate server AND bsm also having a certificate server (on the data processing server)?
Issue seems to have stopped because at around that time (actually, around when we did a ovcert -updatetrusted, which was before executing this) incoming events... stoppped. (they keep being generated in OMW, though).

Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 7 of 14 (1,916 Views)

Re: BSM Omi - Operations Integration

Oddly enough, I imported the certificate from the operations master again, and it gave the same warnings.
But on the -ovrg servrer part it gave the error that it could not import and in the "normal" part it gave the import sucessfull message.

And from then on, I have events on OMi again.

And none of the "couldnt communicate back to OMW" events, at least for the operations master.

HOWEVER, I am still getting those for the other operations servers. I was not expecting OMi to try and communicate directly with the operations slaves, the idea was to have it communicate only with the Operations Master. (in fact, the only connected server that is configured IS the operations master).

HP Expert
PatWest
Posts: 836
Registered: ‎03-06-2008
Message 8 of 14 (1,900 Views)

Re: BSM Omi - Operations Integration

Do you have the possibility to exchage BSM certificates with (one of the) other operations servers, or is this not possible?
Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 9 of 14 (1,889 Views)

Re: BSM Omi - Operations Integration

[ Edited ]

Ill try.
My Operations guy is a bit miffed that BSM is connecting to the Operations servers directly. It was supposed to be connecting exclusively to the OM Master.
There are two OMW server which BSM might not be able to contact directly, since they are in very specific network segments - Only Operations Master server has access from outside that network.


Ill give feedback as soon as I can.

EDIT:
Error C8H10N4O2: Low Caffeine, fix typos.

HP Expert
PatWest
Posts: 836
Registered: ‎03-06-2008
Message 10 of 14 (1,884 Views)

Re: BSM Omi - Operations Integration

FYI, the BSM  online help has information about the Mom setup :

 

Application Administration > Operations Management > Setup > Connected Servers > Manager-of-Manager Configuration

Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 11 of 14 (1,880 Views)

Re: BSM Omi - Operations Integration

Hey, nice resource. I was used to using the .pdf files exclusively, since the online help used to just link to the pdf files (or reproduce word-for-word the pdf file. (since version 9.00).
I see this has dramatically changed, and is now quite a resource to use BSM.

Ill work on two fronts: 1) setup the MOM->BSM Integration as perfectly as possible. 2) work to exchange the certificates between all these servers.

Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 12 of 14 (1,860 Views)

Re: BSM Omi - Operations Integration

So, I've done the integration(s) as best I could.

I've noticed that what we really want is actually the One-Line-Event sync, so that BSM is connected ONLY to the OMW Master. The ideia being that from BSM's perspective, ALL events originate from OMW Master, and BSM has no idea that other OMW servers even exist. (This would simplify matters immensly, and would keep the sensitive OMWs isolated.

How do I set one-line event sync on the OMW servers? (Because the events I receive in BSM have the full forwarding history.

 

Below is the setup as it is now: (written before I understood that what I actually want is One-Line Sync)

Spoiler
All the slaves are set as a "connected server" on BSM, and all have the "user other server" option set to the operations master.

bbcutil -ping between the gateway server and the slaves returns OK.

 

The second tab of the connected servers (outgoing connection) works fine, obviously because it is using the OMW Master server.


HOWEVER, the first tab of the connected servers (Server connection), when I try and test the connection from OMI->OMW, it fails, saying the connection was dropped (On all slaves).

 

I tried exchanging certificates manually (opposed to doing ovcert -update trusted), and it says the certificates are already installed. (on both sides).
the "gateway server could not connect to update event" events keep rolling in. (except in the case of the OMW Master).
So its still trying to communicate directly to the OMW Slaves. (at least to update the events).

 

NOTE: The above is not really relevant to what _I_ need. I just included it to give some perception on what my config looks like at the moment (and to help others that might have the same issue).

HP Expert
PatWest
Posts: 836
Registered: ‎03-06-2008
Message 13 of 14 (1,835 Views)

Re: BSM Omi - Operations Integration


I suggest you post the question:

"How do I set one-line event sync on the OMW servers? "

Into the Operations mgt forum:

http://h30499.www3.hp.com/t5/Systems-Management-OpenView-OP/bd-p/itrc-162#.UuZPIxDb_mE
Advisor
DBarbeiro
Posts: 36
Registered: ‎01-10-2011
Message 14 of 14 (1,833 Views)

Re: BSM Omi - Operations Integration

No need. I figured it out.
On BSM Side, its on Infrastructure settings.
On OMW side, its on the "Flexible server management" settings.


Since these are all production environments, I will do a closely monitored test on this, and see how it goes. But I am confident it will work correctly.
In the meantime, on the BSM side, in the infrastructure settings, I found another setting that stopped BSM from syncing ANY event, which I turned on (and thus stopped all of the error events from being generated).
For now, BSM is supposed to be simply displaying the OMW events. When I am confident I am receiving everything correctly, and it is ready to be a new point of entry, then Ill turn it back on.

Now.... which answer shall I mark as a correct, as the issue is fixed?

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.