Sudden Authorization Problem (HMC)

dphelps

Hello,

I just got lpar2rrd up and running this morning on a RHEL 7.8 vm. Everything seemed to be going well, It looked like it was ingesting data and finally started to create some graphs. I was connect to one of our PowerSystems HMCs.


But after about 3 hours of it running It looks like all of a sudden the IBM Power Systems configuration was changed/lost/corrupted?


I keep getting this error now when I click the "Connection Test" button:


API host network connection: TCP connection to 172.xx.xx.xx:12443 is OK.
API authorization (lpar2rrd): User lpar2rrd authorization failed on https://172.xx.xx.xxx:12443. Check username and password


I haven't changed anything on the HMC side, or on the lpar2rrd side of thing.

[lpar2rrd@x ~]# perl /home/lpar2rrd/lpar2rrd/bin/conntest.pl 172.xx.xx.xxx 12443

Connection to "172.xx.xx.xxx" on port "12443" is ok


The strange thing is I can ssh from the lpar2rrd server to the HMC and log in with the provided username and password

[lpar2rrd@cor089a174 ~]$ ssh 172.xx.xx.xxx

Password:

Last login: Thu Aug 26 11:09:22 2021 from 172.xx.xx.xxx

lpar2rrd@HMC:~>


I ever tried changing the password on the HMC side for that user, I can ssh into the HMC with the new password. But I'm still getting the same error as above:

API authorization (lpar2rrd): User lpar2rrd authorization failed on https://172.xx.xx.xxx:12443. Check username and password


I then created a completely new "test" user on the HMC, confirmed password via ssh. The new user is still getting the same error:

API authorization (test_lpar2rrd): User test_lpar2rrd authorization failed on https://172.xx.xx.xxx:12443. Check username and password.

Any thoughts/recommendations? 

Pavel

Hi,

1. can you log on to the HMC UI with lpar2rrd user credentials?

2. as per docu: https://lpar2rrd.com/IBM-Power-Systems-performance-monitoring-installation.php?5.0#HMCRESTAPI

Allow remote access via the web:
HMC ➡ Manage User Profiles and Access ➡ select lpar2rrd ➡ modify ➡ user properties ➡ Allow remote access via the web

dphelps

I just tested it out. I can log into the HMC GUI with both the usernames I created. 

Pavel

send us logs

Note a short problem description in the text field of the upload form.

cd /home/lpar2rrd/lpar2rrd  # or where is your LPAR2RRD working dir

tar cvhf logs.tar logs tmp/*txt tmp/*json

gzip -9 logs.tar

Send us logs.tar.gz via https://upload.lpar2rrd.com