Recently we had come across a situation where I have to convert the TrueSight Operations management v11 servers installed on a default RSSO realm ‘*’ to a custom realm.
Recently we had come across a situation where I have to convert the TrueSight Operations management v11 servers installed on a default RSSO realm ‘*’ to a custom realm. When we setup the TrueSight Operations management we had used default realm. The same RSSO realm was being used by BMC Remedy Smart IT with Kerberos configuration. This configuration works well with TrueSight Console and Operations Console however TrueSight Administrator Console tool do not work with Kerberos configuration.
Such case the only available option is to create a new Realm specifically for the TrueSight URLs. Here I’m descripting the steps involved in the process.
Note: This process is only applicable for the TrueSight Operations Management version 11 and above.
1. Create New Realm: Login to Remedy SSO Admin create a new Realm with following details:
General:
Realm ID: truesight
Application domains: tsim.mydomain.com,tsps.mydomain.com,itda.mydomain.com
Tenant: mydomain.com
Authentication: Choose authentication type as local and enable chaining mode and add Authentication type LDAP and fill details and Save.
Move the LDAP authentication to first position.
Note: This example I want to use AD authentication as well.
2. Import default users and groups: Login to TSPS Server and locate the UserDataMigration-Utility under Utilities folder verify it has ‘importUserDataIntoRSSO.bat’ file.
3. Prepare the csv file of default users and groups in the following format.
4. Got the utilities folder and execute the import command
importUserDataIntoRSSO -file C:\Installer\rsso_users1.csv -rssoHostName r9.www.inoks.com -rssoPort 8090 -rssoProtocol http
When prompted, type y for the message Do you want to set a common password for all local users imported into Remedy SSO server (y) and enter a default password.
Successful import will display as follows.
5. Login to Remedy SSO Admin Console à Local User Management and choose truesight realm, click on Lock icon to set a password for the admin, bppmws_internal and cms_user accounts.
Note: The default password for the default users is “userID12345”.
6. Change the password of the bppmws_internal user account: Open a command prompt on the Infrastructure Management server and run the following command:
pw internaluser change_passwd and enter the new password updated in the step 5 and Restart the Infrastructure Management server.
7. Export 1) Export all polices: C:\Program Files\BMC Software\TrueSightPServer\truesightpserver\bin>cmapolicymigration.bat export all -d “C:\Policies”
“Export Policy From TrueSight “
Skipping the export of Integration Service/Cluster details in agent configuration for policy ‘Patrol
level process mon and thresholds’
Policy ‘Patrol level process mon and thresholds’ exported successfully
Policy ‘Predefined Policy For Linux’ exported successfully
Policy ‘instance thresholds’ exported successfully
Policy ‘Predefined Policy For AIX’ exported successfully
Policy ‘Remotemonitoring config and threshold’ exported successfully
Policy ‘Predefined Policy For Windows’ exported successfully
Policy ‘Bruce_test’ exported successfully
Policy ‘windows remote monitoring’ exported successfully
8. Edit the MO file created under “C:\Policies” ,Update below information for each file
“tenant” : {
“name” : “bmcrealm”,
“id” : “bmcrealm”
9. Re import the polices (To Re import you can either delete existing one or choose to overwrite it)
10. Login to TrueSight Console using newly created admin user and password. Go Authorization Profile create authorization profile similar to the default out of the box.
11. Go to the components and remove the TSIM Server and add it back and choose new realm and register.
12. Restart the Infrastructure Management server and verify the login and policies.