LMS 3.2 credentials/username question

I recently installed the trial version of LMS 3.2 on a single server (10.1.1.1).  Now my head is spinning over what credentials i'm using vs authorization to modify a routers config vs device config. etc etc.
I've added a bunch of devices, but I cannot configure any devices via LMS.
I added a user called lmsuser to my routers/swiches.
I added the loggin 10.1.1.1 comment to my routers/switches.
I added read and write community ("readstring" and "writestring" strings to my routers/switches).
Question
1) I currently log into the portal using username: admin.  Is this used anywhere other than getting into the portal?
2) I created a credential set called "firstset" with a user called lmsuser and readstring and writestring community strings.  Do I need to do something to associate "firstset" with each device in the DCR?
3) When configuring RME credentials, do I use the the IP 10.1.1.1?
4) In cisco view I see views of my devices.  When I right click on a switch interface and select "disable" I end up with an error message about not having permission to make the change.  What secret handshake is required to make this happen?
I feel like I'm just not connecting the dots here.  Thanks in advance.

1. No.  These credentials are only used to access LMS applications (the portal, command line, etc.).  They are not used to communicate with devices.
2. It depends on how you are adding devices to LMS.  Each way (manual add, Discovery, import) allow you to choose a credential set, or use an automatic credential set.  If you choose automatic, then a credential set will be applied to your devices based on the rules you have defined.  Note: credential sets are only automatically applied when a device is added to DCR.  You can choose to manually apply credential sets later, but if you modify a credential set after a device is added to DCR, those changes will not automatically be applied to your existing devices.
3. I don't understand.  This is the IP of the LMS server.  I'm not to sure what "RME credentials" you are referring, but I can't imagine where you would add 10.1.1.1 with any credentials.
4. You need an SNMP read-write credential (e.g. community string) configured for the device in DCR (i.e. under Common Services > Device and Credentials > Device Management).

Similar Messages

  • Submit Pdf form to http w/ credentials (username/password)

    Hi!
    I developed a form in Adobe LiveCycle, it has a button which submits form with attachments to http site.
    No coding involved, just configuration of the button.
    Http site requires credentials (username/password). How do I pass those credentials with submission?
    Can username/password be added to http header?
    Or I can excecute some javascript before submission?
    Thanks you!

    I got it working
    1. WS (in .net) must be asmx service. WS method accepting attachment should have string as a parameter, which will be passed as base-64 encoded string. So to save it as a file it has to be decoded first. I used byte[] ... = Convert.FromBase64String(yourstring).
    Keep in mind string <= 2GB
    2. In PDF file add WS service as Data Connection (File->New Data Connection ->WSDL File-> wsdl -> etc...). PDF will generate all WS parameters and a button to call WS. Drag and drop data connection on the form OR right mouse click -> generate fields OR set <connect> element of different controls as you wish to match data connection. Let's say control generated and binded to WS input string parameter is called "base64StringDocContent" (name = "base64StringDocContent") and button that submits to WS is called "submitAttachmentBtn" (name="submitAttachmentBtn").
    3. Javascript code to send attachment to WS:
    //access pdf form
    var formDom = event.target;
    //attachment id should be unique, can be anything you like
    var attachmentId = new Date().getTime() + "";
    //prompt user for document and get it
    var documentSelected = formDom.importDataObject(attachmentId);
    if (documentSelected == true){
         //user selected the document
         //get stream of the document (attachment)
         var inputStream = formDom.getDataObjectContents(attachmentId);
         //get new stream encoded as base64
         var vEncodedStream = Net.streamEncode(inputStream, "base64");
         //get string from the stream
         var sBase64 = util.stringFromStream(vEncodeStream);
         //get conrol which is binded to WS input parameter
         //my PDF form is called form1
         var wsInputParam = form1.resolveNode("$..base64StringDocContent");
         //get button which submits to WS
         var wsSubmitBtn = form1.resolveNode("$..submitAttachmentBtn");
         //assign attachment content (encoded string to input parameter)
         wsInputParam.rawValue = sBase64;
         //call click event of WS submit button
         wsSubmitBtn.execEvent('click');
         //done
         //if WS returns any value it will be assigned to control binded to output value of the web service.
    else{
         //user clicked Cancel
    4. Validation and try and catch should be added where/when needed.
    Hope it saves a couple of days for somebody.
    Good luck!!!
    I am still curious how to work with credentials doing http submission.
    If somebody has a solution please post it.

  • LMS 4.01 :credentials vérification SSH enable don't work

    I have a 3750 with tacacs authentication on Cisco Acs.
    in SSH on the active element no worries.
    I filled  the credentials of the device in lms add/import managed device
    But in inventory audits and credentials to create a job with verification to enable ssh mode user name and password,
    the job failed.
    Is this a known problem?
    Have an idea?
    Regards
    Philippe

    Hi,
    Thanks for the update and glad it fix the issue. Kindly close this thread so that it will be helpful for other too.
    Summary :- If you have customized prompts configured on the device that means when you try to login to device the Username --> look like "username" (notedown the lower case of "u") and Password --> password (notedown the lower case of "p"), in this case you need to put these credentials on tacacsprompts.ini file that is located at
    CSCOpx\objects\cmf\data
    So that file look like :-
    [TELNET]
    USERNAME_PROMPT=username:
    PASSWORD_PROMPT=password:
    After making the above change. LMS will try to login to device with lower case username and password and thus most of the issues like device credentials report and Sync Archive for the devices will be fixed.
    Many Thanks,
    Gaganjeet

  • LMS 3.0.1 upgrade questions

    Hi...
    We have the following system freshly installed
    LMS 3.0.1 dec 2007 update
    CW Common Services 3.1.1
    Campus Manager 5.0.2
    Cisco View 6.1.7
    CW Assistant 1.0.1
    DFM 3.0.2
    IPM 4.0.1
    Integration Utility 1.7.1
    LMS Portal 1.0.1
    RME 4.1.1
    HUM 1.0.0 (Eval)
    We have bought the software just over 1 year ago. The System is used on a private WAN that has no internet connectivity, so all updates have to be manually installed. I have the following questions,
    1- I am able to use our CCO login to download device updates, but there are a lot. Are the latest device updates, MDFs inclusive of all the previous ones or I have to download each one separately?
    2- Will my current License allow me free upgrade to LMS 3.1 or higher in order to avoid many incremental updates? The product description on the license claim certificate is LMS 3.0 Devise Restricted Upgrade for LMS 2.5.x, 2.6
    3- Can I directly upgrade from Campus Manager 5.0.2 to 5.0.5?
    All help is appreciated

    Michel correctly answered regarding the LMS 3.2 being able to use your 3.0 license file. I did this same thing myself.
    Regarding the updates, they are cumulative. If you install the latest version, it will roll up the earlier ones. The Common services MDF update is a key one - you'll need to install that first before most of the RME updates will successfully install.
    Be sure to check your logs after each install. CW won't necesarily highlight an install failure due to a dependency not having been met (although it says it will alert you).
    Also, I've been finding it necessary to restart the server after package updates. The auto-restart process is kicking off but when daemon manager restarts, it's not starting up Apache. Doing a subsequent manual daemon manager restart isn't doing the trick either. I may open a new thread on that issue....

  • LMS 4.2 Performance report question

    Hello, I got some questions about Performace Reports, more specifically "Interface utilization".
    If I use the Report -> Performance -> Interface -> Utilization and select one device it generates a report with 3 Interfaces, Fa0/4, Gi0/2 and Fa0 from that device.
    The device Interface status is:
    Fa0/1          connected          trunk          a-full          a-100          10/100BaseTX
    Fa0/2          connected          trunk          a-full          a-100          10/100BaseTX
    Fa0/3          disabled          1          auto          auto          10/100BaseTX
    Fa0/4          connected          trunk          full          100          10/100BaseTX
    Fa0/5          disabled          1          auto          auto          10/100BaseTX
    all interfaces in between are disabled also
    Fa0/24          disabled          1          auto          auto          10/100BaseTX
    Gi0/1          connected          trunk          full          1000          1000BaseLX
    Gi0/2          connected          trunk          a-full          a-1000          10/100/1000BaseTX
    Fa0          connected          routed          a-full          a-100          10/100BaseTX
    The logical (for me) would be that all connected interfaces (Fa0/1,Fa0/2,Fa0/4,Gi0/1,Gi0/2,Fa0) would be included in the report.
    To the qeustions:
    How can I make all connected interfaces appear in the report?
    Is there any way to make a report on for a specific interface, say Fa0/1?

    Hi, I forwarded this question to the support and got some info which might be useful.
    To force LMS to poll specific interfaces, go to Monitor > Performance Settings > Setup > Pollers and create your own poller with the devices or interfaces you want to have polled.
    To generate a report of one or more specific interfaces, you first make a poller for those Intrfacesand then make a custom report which uses that poller.

  • LMS RME Compliance Mgtm - Template Question

    Hello
    I have LMS 3.2 on Windows. I have a question about compliance template. How I can describe unknown values in template? For example: I have routers with 2 - 3 syslog server (on each router they are different) and I want remove all of them and add new.
    Regards,
    Stanislav Kuchma

    I have syslog 10.0.0.1 10.0.0.2 (and in routers config i have several "bad" syslog with "random" addresses):
    If i wrote:
    +   logging   10.0.0.1
    +   logging   10.0.0.2
    -   logging  [#?!(10\.0\.0\.1)#]
    RME tries remove all syslog servers ("good" and "bad")
    If i wrote:
    +   logging   10.0.0.1
    +   logging   10.0.0.2
    -   logging  [#(?!10\.0\.0\.1)#]
    RME says ok and don't remove "bad" servers

  • CiscoWorks LMS 4.0.1 - some questions

    Hello community,
    I would like to ask some questions about CiscoWorks LMS 4.0.1.
    We are using for a few days, and I can't set some request in the system. I hope someone could help me to customize the CW as I would like to use it.
    - We have some Catalyst 6500s, and between them there are Etherchannels. CiscoWorks sends us email because HighUtilization, and it relies on a Gi interface. I read that CW doesn't support etherchannels, is this true.
    - I would like to receive email notifications about errdisabled state, etc. I know this is dome by RME, not DFM. The CiscoWorks server acts as Syslog server, too, and it collects the syslogs. I see in the Syslog summary, that the device sends to CW the syslog, but I can't receive email. I did an automated actions, (Monitor-Syslog-Automated actions), I defined the parameters (Facility: *, Sub-facility: *, Severity: 2, Mnemonic: PSECURE_VIOLATION, Description: *), but CW doesn't send me an email.
    - I would like to customize interface threshould parameters per device. We have some router with Tunnel utilization 90%, but it's okay because we have a 10Mbit line for the external site. But when our distribution switch ethernet utilization would be 90%, it would be critical. Where can I set these parameters per device/interface?
    Thank you for your help in advance.
    Ferenc KURIS

    If you go to  Monitoring > Fault Settings > setup > fault device details
    Select the device click view and click the device to open the detailed device view.
    There you may see the tu interface under interfaces and set it to managed.
    Cheers,
    Michel

  • LMS 4.0 - credentials

    Hello,
    I installed new switchs on my network and I have others credentials than the oldest switches. I created a new credential set name with my new username and password (Admin -> Network -> Device Credential Settings -> Default Credential Sets)
    I'm not sure if it's the good way how to apply this new profile to my new switches. I created a default credential sets policy configuration with the hostname for my new switchs and the credential sets to use.
    I generated a verfication credential report but the result is that I have not the correct account and password for Telnet and SSH.
    Could you please help me?
    Thanks.

    A little mistake. Not only CFM, all LMS4.0 modules cannot SSH to the managed switches.
    Regards
    Hubert

  • LMS - Internal CSU/DSU monitoring question

    I have a question about LMS's ability to monitor internal CSU/DSU's.
    We're thinking about replacing all of our external CSU/DSU's with internal Cisco CSU/DSU's in all of our routers. I was wondering if any of the LMS versions 3.1, 3.2, or 4.0 have the ability to monitor or trap on circuit errors from that CSU/DSU. I have not worked on a router with a CSU/DSU in it yet, so I'm just unsure of all the logs that may come from it. Does syslog contain logs on circuit errors that LMS will recieve?
    We're looking to use the NM1-T3 CSU/DSU module if that helps answer any of these questions. I couldn't find anything on it in the documentation. We're currently running LMS 2.6, but if this requires 3.2 we can move to that.
    Thank you guys so much for the help. This forum has always been so great for these types of questions

    There are no CSU/DSU specific portions of LMS.  However, as you know, LMS can process syslog messages and perform actions based on patterns in those messages.  I don't know off hand of the specific sysog messages related to this NM.  However, you might try asking about those on the WAN Routing community, or look through the system error messages guide on Cisco.com for your version of IOS.
    Another option is you can use the Embedded Event Manager on the device to run CLI commands (i.e. show commands), parse the output, and produce syslog messages that can be processed by LMS.  This way, if there is a specific show command output you want to monitor, you can do that, and still have RME take action.
    While LMS 2.6 has all of the syslog hooks you'll need, LMS 3.2 (and 4.0) has the Health and Utilization Monitor feature (called Performance Monitor in LMS 4.0) that will allow you to poll MIB objects on your device and take action based on thresholds being crossed.  If your device and IOS support the CISCO-ICSUDSU-MIB, there are some good error related objects there you could poll using HUM (e.g. the objects in the ciscoICsuDsuT1StatusTable).

  • Cisco Works LMS snmp v3 credentials

    I'm attempting to get a switch managed via SNMP v3 with CiscoWorks LMS 3.1 but I keep getting an error.  I'm using the same User, Group names and also the same auth and priv credentials but I keep getting the error:
    User is not authorized to perform the task on device.
    I'm not sure what I'm missing.

    Hi Florian,
    actually the ACS 5.2 is not supported in CS 3.2
    here is a list of the supported ACS servers under LMS 3.1
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.2/user/guide/admin.html#wp865998

  • LMS to PI1.2 migration question

    Hello,
    I want to ask 3 questions about data migration from LMS to PI1.2 as the virtual marketing synonym for the real existing product NCS1.2:
    1. Is there a real working and relyable data migration from LMS to PI1.2(NCS)?
    2. What is the minimum LMS version supported for data migration into NCS?
    3. Where is the data migration procedure documented?
    thx for answers,
    Steffen

    There is no migration. NCS  and LSM don't have anything in common.
    A conversion of the DCR export into a format NCS can import is all I expect
    In January a version of NCS/PI should become available that has most functionality (that cisco feels is important), that is similar to that of LMS but in its own (surrely different/perhaps better) way.
    I have no idea what to expect yet. I just hope for the best.
    Cheers,
    Michel

  • IMAP portlet username questions

    Hi to all,
    I have downloaded the IMAP Portlet ver 9.0.4.0. (My portal is 10g)
    The provider registration and the external application was created successfully.
    I put the new portlet in a page and update the login information.
    I can see all the 4 imap folder but I can't send email!!!
    When I clik on the "send" button I get the follow error:
    "Could not send mail: 504 : Sender address rejected: need fully-qualified address"
    I have understood that the problem is the login.
    My username doesn't contains the domain information!!!! and so the email sender is <username>
    and not <username>@<domain>
    My question is simply:
    why I have to use <username>@<domain>???
    The rule "<username>@<domain> = <login>" is a BIG limitation and is unthinkable to force a company
    to adopt it.
    If I login into yahoo I put only my <username> and my <password> NOT <username>@<domain>
    Is there some workaround to avoid all this??
    Regards

    Marco, I believe this is more a configuration on your email server than on the portlet itself.. I've got something similar to what you're describing and I am able to sent emails.. basically as far as I know it's smtp and you can pretty much put anything there...

  • LMS 4.2.1 restore question.

    Dears,
    I  need your help in verifing the restore command for LMS 4.2.1 in windows server:                  
    the command: C:\Program files (86)\CSCOpx\bin} perl.exe backup.pl -d C:\bkp
    where the bkp is the backup folder?
    Kindly confirm if this is correct as i need to resotre the Folder which located in the C: .
    Regards,
    Muhannad

    Hi Mahavir,
    Many thanks for the response, the Restore procedure worked fine using the commands but i have faced a new issue after the restore, the issue as below:
    The new LMS server is still not installed in the network and we are planning to use it as a cold backup server in case we face any failure in the primary server, before the restore, i used to login to the new server using the IE with URL: http://localhost:1741 but after restoring the database, i am unable to login with the same URL and because the server is not connected to the NW, i am unable to login now at all.
    I am wondering what is wrong and shall i connect it to the Network to be able to login via the WEB using its hostname or IP.
    P.S: the new server has identical Hostname and IP of the active LMS server to keep the sync of the database easier when i move the database.
    Regards,
    Muhannad

  • Lms 4.2 adding devices questions

    Hi All,
    I´m new in Prime LMS  and trying to add some my network devices on cisco lms 4.2 and  getting stuck on this stage.
    First I tried to use the "Discovery" way and got  follow messages
    Total Devices Discovered: 16 
    Reachable Devices: 1 
    Unreachable Devices: 15 
    Devices Newly Added to DCR: 0 
    Devices Updated to DCR: 1
    Went on "Unreachable Devices" got a list of devices saying stauts : Unreachable
    any idea what could be the problem ?
    AB

    I found the problem was an snmp configuration missmatch on unreachable devices :/

  • LMS 4.1 Topology Service Question

    i have only 1 switch 2960 POE at customer enviroment.
    i did run topology service and checked on the right side POE CAPABLE Devices
    it shows me that i have 4 switch POE while actually there is only 1 switch POE in real enviroment.
    does anyone have any idea about this issue ?
    appreciate soonest reply
    Thanks

    Its hard to tell without getting the info requested but check the DCR to see how its identified as which device type it is. And compare that to the inventory hardware report and the actual device itself. 
    1. Check the DCR to verify the correct device type is defined for the incorrectly reported devices.
    2. Were the devices automatically discovered or added manually to LMS?
    3. Re-run a a data collection:
    http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/user/guide/monitoring_troubleshooting/mnt-topo.html#wp1044599
    Post the ani.log and the show ver requested after data collection completes.

Maybe you are looking for

  • GR/IR Clearing GL Account Reconciliation with MR11

    Hi Friends, Normally there is always a difference between the Delivery and Invoice, i.e. either Delivery Surplus or Invoice Surplus, the report for which we can generate from MR11, using the quantity variance - Less than/Equal to 100%. However, we no

  • Apple ID for Children

    Can anyone help. I have just upgraded the kids ipads to iOS 7..and imessages have stopped working. So I google search and find that I now have to have apple ID's for both kids. I goto My Apple ID and try creating an account for my son born 2004. I ge

  • ITunes opens slow, won't sync iPad; Windows 7 64-bit

    Hello all, The issue is as follows: I try to run iTunes and it is extremely slow to open. My task manager shows an iTunes.exe process but nothing happens for about an hour.  Eventually it will open and as a music player, operates just fine.  However,

  • The "Zapfdingbats Regular" Font is not available

    Hello All, I am trying to create new DITA topic as new task , getting following error on Frame Maker Console. Can some one suggest , what can be done here to avoid the error. Not getting required template. [Moved to Structured forum by moderator]

  • What would cause all my texts between a certain person and myself only disappear into thin air?

    How do I remove apps on my iPhone?  I've done it before, but can't quite get the combination correct again!!  - 4S - Thank you