on 04-13-2016 10:51 AM
Hi,
I succesfully started Node, but I can't login into it. My cluster.cfg file looks like this:
#config-type=file
#file=cluster.xml
#The following url points to a default location.
#Set as appropriate for your environment.
jdbc-url=jdbc:sybase:Tds:localhost:19111
jdbc-username=gluch
jdbc-password=\
3Fzgs/A/gum6BsMGrq9E2r/88eefYd7FO7ufRESshhs3JPIK
jdbc-password-is-encrypted=true
jdbc-type=sqla
jdbc-sqla-ha=false
jdbc-sqla-ha-mirror-primary=
jdbc-sqla-ha-mirror-partner-1=
jdbc-sqla-ha-mirror-partner-2=
jdbc-hana-sso-bypass=true
cluster-name=esp1
cluster-password=\
A9jgFPDjgk+61sPAru5E3b/N8ZCf2t40OxCfwkSDhlU3v/gS
cluster-password-is-encrypted=true
cipher-file=C:\\SAP_ESP_5.1\\ESP-5_1\\cluster\\keys\\esp1\\cluster.key
I tried this combination, but it doesn't work:
c:\SAP_ESP_5.1\ESP-5_1\bin>streamingclusteradmin --uri=esps://10.61.0.214:19011
--username=esp1 --password=\
[error] authentication : Authentication failure:Invalid login credentials
SAP Version: 5.1.110.00/20151206.1/SP11/winnt/x86_64/64-bit/OPT/Sun, Dec 06, 2015 5:41:30 PM
Thank you for your help!
Jan
What version of ESP are you using? The ESP cluster configuraiotn for current versions is stored in a SQL Anywhere database, not a config file. you should be logging in using the cluster admin credentials you set during installation.
In looking at above, you are trying to connect using password=\ - but the config file has an encrypted password in it - it's not "\".
If you don't know the password that you created at install, then not sure how you recover it - have to turn to the big guns for that (or you could re-install).
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Not sure what you mean by question "Should I use both credentials". If you know the password for the esp1 user, then you shoudl be fine. What I suggest is to leave out the password when you start streamingclusteradmin, and then it will prompt you for the password - type it in then
c:\SAP_ESP_5.1\ESP-5_1\streamingclusteradmin --uri=esps://10.61.0.214:19011 --username=esp1
Hi Alice,
it is working, thank you very much! Now I want to create workspace so I should create some User with that privileges, to do that, right?
Is it possible to create user password with streamingclusteradmin?
I also granted permission to SYS_STREAMING user:
grant all to user SYS_STREAMING
but when I tried to add workspace, I'v got this error:
I tried also:
grant all all on all to user SYS_STREAMING
but no change.
Thank you,
Jan
Hi Alice,
I'm trying to log in
c:\SAP_ESP_5.1\ESP-5_1\bin>streamingclusteradmin --uri=esps://10.61.0.214:19011
--username=esp
Password:
[error] authentication : Authentication failure:Invalid login credentials
but no result. I tried also Studio login, but same error.
I use as a password same as for SYS_STREAMING.
Thank you,
Jan
Hi
Did you actually select to use SSL authentication when installing? One case when that error appears is when SSL= Y and you use uri=esp://10.61.0.214:19011 or the other way round.
try using the non-ssl version to check, which is:-
c:\SAP_ESP_5.1\ESP-5_1\streamingclusteradmin --uri=esp://10.61.0.214:19011 --username=esp1
omitting the s after esp.
Hi Alice,
do you mean this part of the code from cluster.cfg?
<Security> | ||
<Authenticators> | ||
<xi:include href="auth_native_nt.xml" parse="xml"/> | ||
</Authenticators> | ||
<Authorizer enabled="true"/> | ||
<KeyStore> | ||
<Type expand="true">JKS</Type> | ||
<File expand="true">${STREAMING_CLUSTER_KEYSTORE}</File> | ||
<Password expand="true" encrypted="true"> |
r/7g8vCKgki6nsMdroNEK79Y8eCfFd6JOyGf/0RghjM3Z/Ml
</Password>
<Algorithm expand="true">RSA</Algorithm> | ||
</KeyStore> |
</Security>
Sorry for quality.
The cluster is running on Windows Server 2008 as same as ESP Studio.
Thank you,
Jan
okay, so lets go through all the steps, because you are running a windows remote cluster you should be able to do these steps
in one dos window, start db and cluster
start_db.bat
start_node.bat node1
then in another dos window start the interactive clusteradmin
%streaming_home%\bin\streamingclusteradmin --uri=esps://localhost:19011 --username=sys_streaming --password=<your password created when installing>
this will give clusteradmin prompt >
If your windows is using OS authentication, then if your windows login is Jan123, then Jan123 must created as a user in the clusteradmin
>get users will display what users exist
The following command will create Jan123 and give it full access
> grant permissions all to Jan123
this will then allow you to use the following example command to start projects
%streaming_home%\bin\streamingclusteradmin --uri=esps://localhost:19011 --username=Jan123 --password=<your windows password> --workspace=p1 --project_name=p1 --ccx=p1.ccx --add_project
NOTE: it can be easier to add and start project by just using interactive mode, e.g.
> add workspace w1
> add project w1/p1 p1.ccx
> start project w1/p1
I think that you are unlikely to be able to use "esp" as the username , unless that is your windows login!
Hi David,
thank you. Sorry, I haven't realized that settings. I'm finally log in, but when I set from SYS_STREAMING user privileges:
> grant perm all to user jan.bednar
And I log in as jan.bednar and try:
> add workspace w1
I got still the same error:
[error] server returned : [FAILURE:No authorization for requested permission: privilege=add, privilege-type=workspace, resource-type=workspace, resource=w1][CODE:710005]
I also tried to set privilege:
> grant perm add workspace to user jan.bednar
But same error.
Thank you,
Jan
Hi Jan,
The user you are trying to use, jan.bednar, is a native OS user for the Windows machine where the ESP cluster is running. You must append a domain to the user name omitting top-level domain extensions such as .com or .net—for example, fred@sap, not fred@sap.com.
Added: If you do not include the domain, the defaultDomain option must be specified in the authenticator section of cluster configuration.
Also: If you use a Windows account to log in, you must also grant permissions to the user name in the format username@domain.
For example: grant perm all on all to user jan.bednar@sap
You will need to use that complete userid whenever logging into any ESP components when the ESP cluster is running on windows, since all security and authentication is centralized for the whole cluster.
(See Granting Permissions - SAP Event Stream Processor: Installation Guide for Windows - SAP Library.)
So, now let's go back to what you described originally in this post - I'm guessing that for the original user id you were referring to of "esp1", you had wanted to create that using preconfigured username/password authentication.
Here are the steps for setting up a Pre-Configured ESP user account, using the SYS_STREAMING user:
1. Generate an encrypted password string using the streamingclusteradmin utility as follows:
2. Add a username/password authenticator for the new user account:
3. IMPORTANT: You MUST RESTART the node for these changes to go into effect:
User | Count |
---|---|
85 | |
10 | |
10 | |
9 | |
6 | |
6 | |
6 | |
5 | |
4 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.