User Tracking/accounting

Hi,
We have recently purchases a few 10.5 Macs. We have several pre-10.5
machines along with a rich, mixed bag of other OS and vendor platforms.
It is important for us to track machine usage in (or near) real-time.
We developed in-house solutions for this problem for Windows boxes,
*nix boxes and pre-10.5 Macs. I am looking for help with the new
world order please.
I can envision a couple of solutions for the new Macs but I am not
a Mac expert and do not know what to really look for in existing
solutions. Here is my list of imagined solutions:
1) For *nix based OSes and pre-10.5 OSX we have daemons that
"tail" the /var/log/wtmp file and report events to a database.
I know that utmp/wtmp is depreciated starting in 10.5 but the
documentation on Utmpx seems sorely lacking. I am seeing things
take place in the /var/run/utmpx file that I do not understand.
I need an education please and can go into grater detail about
what I'm seeing if necessary.
2) Windows boxes have "script hooks" for the user login/log out events
as well as the system start/stop events. We can leverage this
hooks to cause accounting records to be stored in our database.
I can imagine that OSX might have similar sorts of "hooks" but
i do not know what they might be called so doing Google searches
for this has not been helpful for me.
- Are there login/out system start/stop script hooks for Macs?
- How do you access them?
- Assuming that these hooks exist then can they run a
script/executable that an unprivileged customer can not modify?
Another way to ask the question is: if these hooks exist then is
there a privileged phase of execution where root/macadmin owned
scripts can be executed on an unprivileged customer's behalf?
3) Is there an Apple or third party app that will track login/out
system start/stop events for ALL customers logging in on the
console or SSH-ing other otherwise remotely accessing the machine?
4) Can you suggest another approach I have not thought of?
All the best,

I have found a couple of things so far. there are LoginHook & LogoutHook scripts that can be installed via something like:
sudo defaults write com.apple.loginwindow LoginHook "/path/to/script"
I have been told these hooks were depreciated in 10.5 though. The "better" way to do this now is to use LaunchAgents.
Neither option is perfect though unless we only have single user machines where the only way in is on the console. At least several of our machines will have SSH access available and we have to track all accesses.
Using the "last" command is a possibility but is not as elegant as I would hope for. I would much rather have Apple's "last.c" source and find out how they are doing what they are doing.
Cheers,

Similar Messages

How do I move all my files from one User Profile (account) into another? I needed to create a new account and want all of my files accessible in the new one.

How do I move all my files from one User Profile (account) into another?
I needed to create a new account and want all of my files accessible in the new one.

ok, what you're learning right now is 101 unix, which is good. Unix is a good thing
now: the way unix works, and macos (which uses unix underneath) the files and folders work like a hierarchy.
the start of that tree is /
so, if you were to do:
cd /
(cd means change directory)
it will bring you at the highest branch of the file system.
cd /Users
will bring you to where all the users are.
to see whats in /Users you can use your friend ls command
ls means list files/directories
so:
cd /Users
ls -la
(the -la here means show all (even hidden) and long format (very verbose)) this flag is very optional.
you will see
fred
user2
for example.
if you want to see the desktop of user2 you would change directory to it then list the files.
for example:
cd /Users/user2/Desktop
Note that the files and directory are case sensitive, so, desktop is NOT the same as Desktop, or DESKTOP
ls -la
you should then be able to see everything in users2 desktop
you could have done as well the same thing in smaller steps, for example:
cd /
cd Users
cd user2
cd Desktop
this is the equivalent of cd /Users/user2/Desktop
So, for your file, i don't know where it was, but know that if you log in as user2, it will directly put you in
/Users/user2
which most likely the file you had created from the other user was in /Users/user1
if you copied all the files from /Users/original_user to /Users/secondUser
most likely yes, all your mail, bookmarks etc would be copied over.
so in your case.
sudo chown -R seconduser:staff /Users/secondUser
should work
Remember that if you start a path with the character / it means start from the root of the file system, at the highest top you can ever get.
so
cd /Users/fred
is not the same as
cd Users/fred
unless you were in / already
i know it may be confusing at first but it's actually very logical if you play with it.
to simplify, think of it that / means C:\ on windows
you can't go any higher than C:\ (in a way)
if you're unsure which directory you're currently in, you can always type:
pwd
it will tell you where you are.
for example:
cd /
pwd
this shows /
cd Users
pwd
this now shows /Users
cd /System/Library
pwd will show /System/Library
cd /
cd /Users
cd fred
cd Library
pwd will show /Users/fred/Library
unix can look very scary but it's actually vital and very necessary to do tasks sometimes that would take for ever to do via the windows. This is good learning.
so for the myfile you had created, i can't tell you where it is, at the time you created, if you can do a pwd command you'll know the path,
ls -la (this shows all the files where you are)
if you see myfile in the list
do a pwd
whatever is return, the real location of the file would be:
whatever pwd returned / myfile
I hope that makes sense.

How many different iPods can I sync with my single iMac user/iTunes account?

Good Day to All,
Can anyone tell me how many different iPods & iPhones can I successfully consistently sync/integrate using my one "user account" in iTunes on my iMac? This ist situation:
I have always (and only) synced etc. my iPhone with my one iTunes UID which is under my ONE "User Account" on my iMac. Recently, my elderly folks gave me 2 iPods they have never used. One is a little silver 4GB shuffle (the little guy with a built on "belt clip" & it verbally tells you what song and artist is playing. The other is also an iPod shuffle ( only 1GB), also has the metal "pinch to open; belt clip"; also no display, however it came with a little USB Dock and THIS ONE has all of the user controls on the face of it in a circular patter of course..
To have COMPLETE successful "interaction/integration/syncing" etc (with no issues/complications etc) with my iTunes currently and previously only used with my iPhone, do I have to create two new additional "User Login/accounts" on my iMac (one for each iPod) to have all three if my devices work perfectly fine, or can I just use my same iMac login (UID) & iTunes that I use with my iPhone and have no worries?
(ie: I created my girlfriend her own iMac login UID which she has always used for backing up/syncing etc her iPhone with HER iTunes library etc)
In short, does iTunes have the ability to have multiple iPods & my iPhone under my one existing iTunes account AND using the same single iMac login/UID I've always used with my iPhone?
Obviously, I know I could create an iMac login for my mom's, another for my dad's & create them both their individual iTunes accounts, but they really don't want to have to worry about dealing with all that. I'm teetering between just treating them as my iPods and mixing/adding their limited CD's into my library (again, if iTunes allows multiple iPods etc as explained above..
OR; my other thought would be (again, if one iTunes account can integrate the two iPods as seperate devices and to just create ONE iMac UID login and ONE iTunes account under my dad's name, and use that one account for both of their music, both of their iPods, importing their CD's into the same iTunes library, then when syncing etc. just doing selective transfers/sync's of the specific music for each iPod... Even then, will iTunes be able to differentiate the two as far as backups/restored etc? I think answering my own question as I type due to the cloud... For completely individual cloud interaction/integration, I would def need to create each of them their own iTunes accounts, otherwise they will have all of each other's songs on their devices.. (ie: And my dad def doesn't want to worry about skipping over my mom's Journey or Aerosmith tunes to get to his Willie Nelson and vice versa for example.
(Sorry sooooo drawn out; thinking outloud) I guess it seems obvious that since all their digital music has to be on my iMac, I really should create them each their own iMac UID login as well as their own individual iTunes Acounts to insure cloud services work easily for restores/backups etc...
Thanks for stumbling thru my thought processes here (if I didn't lose ya long ago); I'm exhausted and throwing thoughts at the classroom board to see what sticks.... The best easiest way that is.. (The two aren't always the same obviously!)
Thank you all for your precious time and consideration and most if all; YOUR PATIENCE!! Any confirmation if the options and suggestions are greatly appreciated. You know, gotta take care of the folks & what is the simplest for them as just end users is the most important or they'll NEVER bother with them in the end...
Respectfully appreciative,
DB

You can use as many iPods with one iTunes library as you want.
(108420)

LMS3.2 User Tracking IP Phones Discovery Doesn't Work

I am having difficulty getting the User tracking for IP Phones to work correctly in Ciscoworks LMS 3.2.
Callmanager is version 7.1.5.10000-12. Campus manager version is 5.2.1
The Callmanager publisher and two subscribers are all showing as application servers with green icons under the topology services view.
The callmanagers show as CDP neighbours on the switches to which they are connected.
I can do an SNMP walk of the ccmPhoneTable from the Ciscoworks devicecenter and get a ton of returned data.
The IP phones are discovered as end hosts and have mac address and IP address info when checked in the User Tracking utility.
Callmanager sysObjectID = OID: CISCO-PRODUCTS-MIB::ciscoMCS7835I
Any help you could give with troubleshooting would be greatly appreciated.
Regards
Rob

Thanks Nick,
I had seen that document and been through the processes
The mac and IP addresses of the ip phone are discovered.
The callmanagers are discovered and have green application server icons in the topolgy view
I can do an snmpwalk of the ccmPhoneTable OID and get returned data (as per this post by JClarke https://supportforums.cisco.com/message/664859#664859)
I can't do an snmpwalk of the ccmPhoneExtension as described in that document but I assume that since it applies to campus manager 3.2 and 3.3 that it is a bit dated and not relevant to later versions of callmanager.
I think that I have covered all the basic cdp/snmp and discovery issues. Any suggestions on where to go from here would be appreciated.
Regards
Rob

LaserJet P1505n printing slow just for user-level accounts in Win7

I have several workstations running Win7 Pro 64-bit that have been installed as replacements for XP machines. All of them print to one of several P1505n printers, and are using the latest drivers from HP. Under XP there were no problems printing to these printers, but the Win7 machines have significant delays when trying to print. The Windows test page prints instantaneously, but printing from any other application has a delay of up to a full minute before the job begins to print. Once the job prints, it prints without issue.
One thing that I have noticed during my testing seems to point to permissions. If I am logged in using my admin-level account, everything prints as it should, with no delays at all. Once I log in with a user-level account, however, the delays begin. I found the driver files at C:\Windows\System32\spool\drivers\x64\3, but giving "everyone" full control over those files does not help.
Is there anything else that I should be looking at?
Thanks in advance!
Donny

In the end, I was able to resolve the problem by installing the Vista x64 drivers. No playing with permissions necessary.

User tracking not finding any hosts in Ciscoworks LMS 3.1

L.S.
Our test-configuration is as follows:
Application versions:
Ciscoworks LMS 3.1
Ciscoworks Common Services 3.2.0
Campus Manager 5.1.4
We have 31 managed devices in Campus Manager (data has been collected on all),
Edit: All of them show up green in the topology window.
The device are: 2 6509 cores (running IOS s72033_rp-IPSERVICESK9_WAN-M version 12.2(18)SXF8), 1 ASA firewall (running ASA-OS version 8.0.5) and 29 switches (2960 and 3560 models both running ios version 12.2(52)SE). The switches are connected as follows:
User tracking jobs are running normally, but aren't finding any end-hosts or IP phones at all (I suspect around 250-500 hosts+ on these switches)
We are running SNMP v3 on the switches and have added the following configuration items to all the switches:
snmp-server group readonly v3 auth context vlan-1
<repeat for all present snmp-contexts as shown in show snmp context output>
snmp-server group readonly v3 auth context vlan-83
Debugging is enabled in CM->Admin->Debugging Options->User Tracking Server
This is the UT.log file of the last major acquisition:
messages will remian logged to file: D:\PROGRA~1\CSCOpx\log\ut.log
2010/01/13 14:00:01 main MESSAGE ProcessInitializer: Properties will be read from D:\PROGRA~1\CSCOpx\campus\etc\cwsi\ut.properties
I= 0value *.*.*.*
I= 1value 6
I= 2value 1
2010/01/13 14:00:01 main MESSAGE DBConnection: Created new Database connection [hashCode = 10969598]
PartialOrderNode tree dump: time base = VMPSMajor
<root>
    VMPSMajor: <root>
    VMPSMajor:     VMPSMajor.GetXMLData
    VMPSMajor:         VMPSMajor.PingSweep
    VMPSMajor:         VMPSMajor.PopulateFromDCR
    VMPSMajor:             VMPSMajor.GetPortStatus
    VMPSMajor:                 VMPSMajor.GetBridgeTable
    VMPSMajor:             VMPSMajor.Sweep
    VMPSMajor:                 VMPSMajor.GetIpXlateTable
    VMPSMajor:                 VMPSMajor.GetIpv6XlateTable
    VMPSMajor:                     VMPSMajor.GenerateTable6
    VMPSMajor:                         VMPSMajor.GenerateTable
SMFunction evaluation order: time base = VMPSMajor
VMPSMajor.GetXMLData Major
VMPSMajor.PingSweep Minor
VMPSMajor.PopulateFromDCR Major
VMPSMajor.GetPortStatus Minor
VMPSMajor.Sweep Major
VMPSMajor.GetBridgeTable Minor
VMPSMajor.GetIpXlateTable Minor
VMPSMajor.GetIpv6XlateTable Minor
VMPSMajor.GenerateTable6 Major
VMPSMajor.GenerateTable Major
Time base VMPSMajor has 5 major nodes and 3 minor traversals.
log4j:ERROR No appenders could be found for category (CTM.common).
log4j:ERROR Please initialize the log4j system properly.
In classlist loader
In classlist loader processing sub classes
updation done
In classlist loader completed
2010/01/13 14:00:03 main MESSAGE DBConnection: Created new Database connection [hashCode = 12524859]
Calling default
Subnet to SubnetData Map Size :73
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 12524859]
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 10969598]
2010/01/13 14:04:50 main MESSAGE DCRDevWrapper: Closing DCRProxy
I'm slowly getting to a dead end here. What am I missing?

Well, our problem was resolved finally through a weird coincendence after having a websession with a Cisco TAC engineer (TAC case SR 613376661)
We changed the
snmp-server group readonly v3 auth context vlan-xxxx
commands in the switches to:
snmp-server group writeonly v3 auth context vlan-xxxx
that is: use the writestring in the snmp-server groups instead of the read string.
After we changed that, all of the User Tracking mysteriously started working.
As far as I know, the writestring should not be needed, but apparently it is....
Is there any explanation for this?

Help with user.update.accounts[Lighthouse].changes[roleInfos].new

When I access user.update.accounts[Lighthouse].changes[roleInfos].new it returns a list of XMLObjects, which are the new list of roles to be provisioned in IDM. The following is an example:
<GenericAttribute>
<Object>
    <Attribute name='attribute'>
      <Object name='Production Server'>
        <Attribute name='directlyAssigned'>
          <Boolean>true</Boolean>
        </Attribute>
        <Attribute name='state' value='assigned'/>
        <Attribute name='type' value='BusinessRole'/>
      </Object>
    </Attribute>
</Object>
</GenericAttribute>I would like to execute a specific transition when a specific role is identified within work flow transition from this list. So I thought I could try the following:
<contains>
<ref>user.update.accounts[Lighthouse].changes[roleInfos].new</ref>
<s>Production Server</s>
</contains>This does not work, but in my workflow debug I see the following:
Resolved reference user.update.accounts[Lighthouse].changes[roleInfos].new = [Corporate Domain Administrator
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ITRole
, Employee Production
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
, IT Organization
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
, Information Security
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
, Information Security Specialist
directlyAssigned = true
state = assigned
type = BusinessRole
, MachineEX bzncvs02ex
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ApplicationRole
, MachineEx bznsa02ex
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ApplicationRole
, MachineEx bznwsint01
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ApplicationRole
, Technology Organization
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
]My question is how can I check for something specific in XMLobject list similar to the following or Java code?
<contains>
<ref>user.update.accounts[Lighthouse].changes[roleInfos].new</ref>
<s>Production Server</s>
</contains>

I solved my problem and wanted to share the solution with yall
1. First off the modifications are stored in a task instance, which is passed to the workflow engine
variables.user.update.accounts[Lighthouse].changes[roleInfos].new2. I created a class to parse the list of changes which are stored as XMLobject in a task definition
public Boolean roleChangeValidation(List<GenericAttribute> changes, String roleid)
          String type = "MANUAL";
          Boolean returncode = false;
          if (changes != null) {
               Iterator<GenericAttribute> it = changes.iterator();
               do {
                    if (!it.hasNext())
                         break;
                    GenericAttribute change = it.next();
                    GenericObject value = change.get();
                    String name = value.getName();
                    if(this.Debug)
                         System.out.println(type + ":" + name);
                    if(value.containsValue(roleid))
                         if(this.Debug)
                              System.out.println(name);
                         returncode = true;
               } while (true);
          return returncode;
     }3. I added the following actions to the update workflow, which passes the Roleid I am looking for and returns true if found.
<Action id='1' name='Validate Privileged Role'>
<expression>
    <block>
      <defvar name='zRoleChange'>
        <new class='com.generic.util.zRoleChange'>
          <Boolean>true</Boolean>
        </new>
      </defvar>
      <set name='_tokencheck_'>
        <invoke name='roleChangeValidation'>
          <ref>zRoleChange</ref>
          <ref>user.update.accounts[Lighthouse].changes[roleInfos].new</ref>
          <s>Production Server</s>
        </invoke>
      </set>
    </block>
</expression>
</Action>Edited by: OlympicAdmin on Feb 24, 2010 12:39 PM

Campus manager user tracking problem

Hi We are using LMS 3.0.1 and the campus manager verson is 5.0.2. We have two subnet which are used for the management ip of switch kept in two different geographical areas. I have made the entry of all devices kept in both subnets and all the devices are know device in DCR, RME and DFM. also after data collection the devices are shown in campus manager database. But I am not able to learn the end host details of the hosts connected to one of our segment.
even if the perticular subnet is not appearing in "campus user tracking" as well as the devices belongs to the subnet. but I am getting all end host details from the second subnet.
please help.

Hi clarke,
i have updated the cm to the latest but still it did not learn. Later i added the 10.188.7.x ip addresses manually in the discovery settings instead of " *.*.*.* " - ip range. Now i am able to see these devices in topology view > layer 2 veiw as connected devices & not seen in unconnected..
Now i need to see the hostname, ip address etc details of these segments in UT acquisition window.... Secondly in topology view, the core switch is showing in "?" question mark symbol. This device is WS-C6509-E (sup-bootdisk:s72033-ipbase-mz.122-33.SXH3a.bin). I tried to delete this device from common services and added it again, there i selected "ws-c6509", i did not see the " ws-c6509-E".
in Cisco site, the serial number of the device is showing as the device "VS-C6509E-S720-10G"
Can u pls help me on this..
regards
rajesh

User Tracking in LMS 3.0.1

Hello Clark,
I have read the user guide for the CM 5.0 for Tracking users and also i have read the Understanding UTLite,I can't see the users login???
what can be the possible reason i have missed.
Thanks

Hello Clarke,
The domain administrator made a mistake in specifying the details in DC,i just added,I have less windows knowledge,where to find the logon scripts files for step 3 in windows 2003 server.as per the campus manager user guide .
Edit the UTLiteNT.bat file:
a. Open the UTLiteNT.bat file.
b. Locate the following line and replace domain and ipaddress with the domain name of the Windows
domain controller and IP address of the computer running the Campus Manager server:
start %WINDIR%\UTLite33 -domain domain -host ipaddress -port 16236
If port 16236 is already in use, enter a different number. This port number must match the number
that you entered in the Use Port Number field, in the User Tracking > Administration >
Acquisition > Acquisition Settings page.
For more details, see Modifying Acquisition Settings, page 7-10.
Step 3 Edit the logon script files to run the UTLiteNT.bat file when users log into the network by adding this
line:
UTLiteNT.bat
Thanks,

Financial Reports User Tracking

Hi Guys
Can any one tell me how to track the user login, report modification, creation and deletion kind of activities in FR--System 9.X??
Appreciate your inputs..
Thanks
Jagan

Thanks for your response.
Can you explain how can we set up this user tracking for FR and WA reports. I think this usage tracking is only for IR reports.
Really appreciate if you can share your experiance on this...
Thanks
Jagan

LMS4.1 user tracking not sortable

in LMS 4.1, under Monitor->Identity Dashboard, i have "user tracking summary" as a portlet, which tells me i have ~ 17,000 users. when i click the report, it pops up a screen that shows mac address, ip address, hostname, subnet, etc.
If i try to do ANY filtering, it returns 0 records. this could be from a specific IP, mac address, device name, or subnet. i have tried every type of record. every filter i attempt always ends with 0 records returned, even though in the unfiltered list they show up. It would be problematic to manually sort through 17,000 users looking for the particular records i need without the ability to use the filter.
can anyone provide an example of how to filter the User Tracking report? is there some feature in LMS i don't own or have enabled to allow this filtering?
thanks!

I can't disagree with your logic, I guess I just assumed such an enterprise solution (that is FAR from cheap) wouldn't require an export of my close to 20,000 records to a .csv in order to do simple sorting.
I will continue to look for a solution within the application, but if worse comes to worse i guess an export could suffice for some of what i'm trying to do.

LMS 3.2 and user tracking problem

rme 4.3.1
cm5.2.1
cv 6.1.9
dfm 3.2.0
ipm 4.2.0
portal 1.2.0
cs 3.3.0
cwasst 1.2.0
running on windows server 2008.
This was a clean bulid, and we imported all pertinent data from our old lms 2.6 server. This was in september 2010. Everything worked as expected and continues to work except for......
We are in an upgrade cycle for our 4500s. We are upgrading from 12.2.50-sg4 to 12.2.50-sg8, and also upgrading rommon to 12.2.31r-sga4.
It appears that user tracking is not working anymore for the upgraded 4500s. UT still runs, and works perfectly for all other devices, including the 4500s that have not been upgraded yet. I know this sounds goofy, but it really does seem to be the common denominator. I've checked the windows updates, package updates, etc in trying to figure out what made this happen. It really does all come back to upgrading to the above version. All aspects of this server are running great and as expected, it's just that UT for the upgraded 4500s isn't working anymore. I do run the logbackup script weekly (past experience has taught me to do this), and try and keep up with any patches or package updates, etc.
If anyone has seen something similar or can suggest anything, I'd appreciate it. I think I am going to have to open a case on this. Thanks - chris

Michel,
Indeed, it looks like that is the problem. I guess I was focused in on CW rather than the whole picture. But yes, indeed, if I walk the mac table for a vlan on a 4500 that has not been upgraded it works. If I do the same on an upgraded one, I get nothing.
The cautious optimism is that we do have a sup6 at our DR location that is running 12.2.53-sg1 and this test works on that switch. So as long as that
version isn't deferred, we'll test that on one of the older sups to verify.
So thanks for the help, I appreciate it - chris

Prime Infrastructure 2.0 and User Tracking

Hello
I'm having a look at getting wired User Tracking working on Prime 2.0. I checked that it is supported in the following link:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps12239/guide_c07-729089.html
I'm having a problem getting dynamic user tracking working for wired non-802.1x clients. The switches are configured for mac-notification traps and the config works fine for LMS.
Another LMS User Tracking feature I'd link to get working in Prime 2.0 is CUCM intergartion where Prime would pull IP Phone extensions/names etc from CUCM.
Are either of these User Tracking features supported in Prime 2.0 (or at least roadmapped) or should I stick with LMS 4?
Thanks
Andy

I am gettng good non-802.1x wired user tracking info. see the screenshot below (click to expand).
I don't have a CM so I can't comment on that bit.
Row 1 in the screenshot, for example, is confirmed with the following CLI output:
User_Access#sh run int fa1/0/41
Building configuration...
Current configuration : 177 bytes
interface FastEthernet1/0/41
description user access
switchport access vlan 10
switchport mode access
snmp trap mac-notification change added
spanning-tree portfast
end
User_Access#sh mac address-table | i 1/0/41
10    000f.b58e.3732    DYNAMIC     Fa1/0/41
User_Access#sh inv
NAME: "1", DESCR: "WS-C3750-48P"
PID: WS-C3750-48PS-S   , VID: V10 , SN: FDO1425X2M9
User_Access#sh ver | i bin
System image file is "flash:/c3750-ipservicesk9-mz.122-55.SE5.bin"
User_Access#

LMS 4.0.1 and User tracking with SNMP v3

Hi! (again )
I've another problem with our new LMS 4.0.1.
We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.
I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.
As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem.
The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
I'll be grateful if somebody could advice what to do.
Thanks
Gabor

Understanding Debugger Utility
The utility displays a report on the reasons why User Tracking failed to discover end hosts on specific ports.
In many cases, User Tracking may not perform as expected. This may be because of problems in other LMS applications. For instance LMS Server may have devices that are not discovered or inadequate VLAN discovery in Topology Services.
You can run the utility to troubleshoot problems, or provide the report and log generated by the utility when you contact TAC for help in diagnosing problems.
The debugger utility uses the data collected by LMS Server and reports the reasons for the missing ports in User Tracking.
This tool also has an SNMP component embedded which runs an SNMP query for the table as a part of verification for SNMP failure. For example, SNMP bugs in Catalyst operating system because of which User Tracking may fail to discover devices.
This generates an Action Report that you can use to analyze the data.
The Debugger Utility:
1. Checks the switch ports in a sequential order.
2. Reports violation of basic rules for each of the missing ports such as link ports and trunk ports.
3. Checks for SNMP retrieval of data, if the ports pass the validity check.
4. Generates an Action Report suggesting possible remedial actions to retrieve the valid missing ports.
Using Debugger Utility
The Debugger Utility is available at $NMSROOT/campus/bin/ (where $NMSROOT is the directory where you have installed CiscoWorks).
To run the Debugger Utility, run the command:
utdebug -switch switch-ip -port port1[,port2 ...] [-export filename]
where,
switch is the switch to which the end hosts are connected.
ports are the ports on the switch which have missing end hosts User Tracking.
-export filename specifies that the debug messages be stored in the file specified. If this option is not used, the messages are displayed on the console.
For example,
utdebug -switch 10.29.6.12 -port 5/12
utdebug -switch 10.29.100.10 -port Fa0/10
utdebug -switch 10.29.6.14 -port Gi6
Pretty sure you will find this and perhaps more in the build in help of LMS
Cheers,
Michel

User Tracking - Application error: URN_NOT_FOUND

hello
running ciscoworks 3.2 on Windows 2008 SP2 - installed apps are:
1. Campus Manager 5.2.1
2. CiscoView 6.1.9
3. CiscoWorks Assistant 1.2.0
4. CiscoWorks Common Services 3.3.0
5. Device Fault Manager 3.2.0
6. Integration Utility 1.9.0
7. Internetwork Performance Monitor 4.2.0
8. LMS Portal 1.2.0
9. Resource Manager Essentials 4.3.1
When I run a quick report in Campus Manager (User Tracking > Reports) I get the following error appearing in a window:
Application error: URN_NOT_FOUND : urn "ogs_server_urn" : Not found !!.
Acquisition is working fine – on completion it states how many new hosts have been discovered but I get the above error when I try running a report.
Reloaded server but problem persists. I’ve attached the output of pdshow and the cmapps log - any advice/guidance appreciated.
Thanks
Andy

Hello,
I have the same problem.
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
LMS2.6
could anybody help me?
I attach the ctm_config.txt file.
Thanks

User Tracking/accounting

Similar Messages

Maybe you are looking for