Solman Configuration - Authentication of Agents

[former_member245319]

Hi ,

I am in the process of Configuring Solution Manager 7.1

Currently Stuck on System Preparation Stetp 5.4 - Set Authentication Policy for Agents.

I am unable to get the agent to connect.

What i have done up to this point.

Installed Diagnostic Agent, Host Agent and CA Wily Introscope.

Stystem Preparation:

Steps 1-4 is very straight forward., Status:GREEN

Step 5.1 - Configure Connectivity: No SAP Web Dispatcher used., Status:GREEN

Step 5.2 - Set Authentication Types for WS: Manually adjusted Authentication types, Status:GREEN

Step 5.3 - Enable Web Services: Execute ALL, Status:GREEN

Step 5.4 - Set Authentication Policy for Agents: Use Basic Authentication

ERROR:

Diagnostic Agent not Authenticating:

Goto Agent Administration= Logged on using: J2EE_ADMIN user.

- Selected SOLMAN Agent

- Pushed Credentials

- Retry Connection

ERROR:

J2EE connection user : CN=SMD_AGT,OU=SAP AGS,O=SAP,C=DE
Authentication method: certificate

Exception: com.sap.engine.services.jndi.persistent.exceptions.NoPermissionException: Exception during getInitialContext operation. Wrong security principle/credentials. [Root exception is com.sap.engine.services.security.exceptions.BaseLoginException: Cannot authenticate the user.]

Once this is done. The user: SM_INTERN_WS is locked and i need to unlock.

I have also Turned Maintenance Mode: On

Stoped The Diagnostic Agent

Executed:

smdsetup managingconf hostname:"sapms://<FQDN>" port:"8101" user:"smd_admin"pwd:"#######"

Restarted Diagnostic Agent, Checked users in Solman_Setup, Executed Step5.2 (Create Logical Ports), Give it a few minutes to propogate and tested again.

Same error keeps repeating.

I am not sure what my mistake is, I know its a user setting somewhere. Am i perhaps using the wrong user on the SMDSETUP?

JAVA UME is pointing to 001 and i am running setup from 001.

Any advise will be most welcome.

I need to get this problem resolved

Regards,

Johann

[former_member270188]

Hi,

I would advise to set authentication method in solman_setup for agents to certificate, create the certificate in "5.4 Set Authentication Policy for Agents". There you have "agent administration" link, follow it, and choose the authentication tab. Select the certificate and broadcast it, all agent will go offline and receive the certification.

If you have password problems with the agents use with agent admin user on OS:

./smdsetup.sh sldconf hostname:FQDN port:5<sysnr>00 user:smd_admin pwd:<pwd>

./smdsetup.sh managingconf hostname:FQDN port:5<sysnr>00 user:smd_admin pwd:<pwd>

Hope this helps.

Krisztian

[former_member204080]

HI Johann,

During installation of Diagnostic agent did you select to use SSL connectivity (choose connection option)

ALso during installation did you give any credentials in connection information

starting from solman 7.1 SP10 we should use SMD_AGT user

Regards,

Murali

[ruth_reilly]

Hello Johann,

This SAP Knowledge Base Article deals with the exact same error you have shown above:

2013578 - SMDAgent cannot connect to the Solman using certificate
based method - Solman 7.10 SP11/SP...

Hope it helps,

Ruth