Monitoring IBM TS4300/Dell EMC ML3 tape libraries not working?

Hello,

Using xormon-ng appliance, updated to latest 2.1.10 version to monitor our two tape libraries, they are:

IBM TS4300 v1.4.1.0-B00

Dell EMC ML3 v1.5.0.0-A00

Both fail with:

API authentication status

Authentication failed: Authentication failed on all login endpoints

I have added a xormon user to both libraries, and the role is "monitor" as per the docs. Not sure what the issue is.

Anyone able to help me out?

Comments

  • c3rberus
    edited December 16

    Also just to add, no f/w issues at play, the TCP connection to the API (Port 3031) returns OK.

    TCP host network connection

    TCP connection to 172.16.x.x:3031 is OK

  • Hello,


    The TCP connection test is successful, which is good. Let's troubleshoot the authentication issue step by step.


    **Understanding the Authentication Process:**

    Our system automatically tries multiple login endpoints to detect your device type:

    1. First tries `/v1/login` (IBM TS4300 endpoint)

    2. If that fails with 401/404, tries `/rest/login` (Dell ML3 endpoint)


    A successful response should return either:

    - `{"token":"..."}` (authentication token), or

    - `{"status":"success"}` or `{"status":"ok"}`


    **Manual Testing:**

    Please test the authentication manually using curl to see the exact API response:


    **For IBM TS4300 or Dell:**

    curl -k -X POST https://172.16.x.x:3031/v1/login \

     -H "Content-Type: application/json" \

     -d '{"username":"youruser","password":"yourpassword"}'


    **For Dell ML3 orTS4300:**

    curl -k -X POST https://172.16.x.x:3031/rest/login \

     -H "Content-Type: application/json" \

     -d '{"username":"youruser","password":"yourpassword"}'


    Try both endpoints and share what they return.


    **Additional Troubleshooting Steps:**


    1. **Test with Administrator account:**

      If you have an administrator account, try it as well to rule out permission issues:

       curl -k -X POST https://172.16.x.x:3031/v1/login \

       -H "Content-Type: application/json" \

       -d '{"username":"admin","password":"adminpass"}'

      2. **Check account status:**

      Verify that your "monitor" user account is:

      - **Not disabled/locked** - check the user management page on the device

      - **Not expired** - some devices have account expiration policies

      - **Password is correct** - try logging into the device web UI with the same credentials


    3. **Check device logs:**

      If possible, check the authentication logs on your TS4300/ML3 device to see why authentication is being rejected.


    Let us know what the curl commands return.


    Thank you.

  • I followed your steps, and the issue was with the login.

    When the monitoring-role account is created for xormon, you need to login to the account one-time using the web interface to change the password, apparently it gets created with some "must change password at next login" type of flag.

    curl -k -X POST https://172.16.xxx.xxx:3031/v1/login -H "Content-Type: application/json" -d '{"username":"xormon","password":"xxx"}'

    {"CODE":"ERC_INV_PARAM","MESSAGE":"Please change password over RMI to get access to the interface"}

    When the password is changed, it works.

    curl -k -X POST https://172.16.xxx.xxx:3031/v1/login -H "Content-Type: application/json" -d '{"username":"xormon","password":"xxx"}'

    {

      "status": "ok",

      "token": "Bearer eyJ0eXAiOiJK.."

    }

    Output from both IBM TS4300/Dell ML3 is good now.


    Connection test results:

    Microservice test

    TCP host network connection

    TCP connection to 172.16.xxx.xxx:3031 is OK

    API authentication status

    Authentication to API is successful

    Library information

    Successfully retrieved library info:

    - Model: TS4300

    - Serial: 3555L3A7801B5T

    - Firmware: 1.4.1.0-B00

    - Status: ok


    Connection test results:

    Microservice test

    TCP host network connection

    TCP connection to 172.16.xxx.xxx:3031 is OK

    API authentication status

    Authentication to API is successful

    Library information

    Successfully retrieved library info:

    - Model: TS4300

    - Serial: 3555L3A7801CT1

    - Firmware: 1.5.0.0-A00

    - Status: ok


    Thank you :)

Sign In or Register to comment.