Testing authentication with UCSPE

RE: New Message from Helmut Pfeiler in Unified Computing UCS Manager - Tech

2012-10-08T11:57:12Z

Helmut, easiest way to find the required XML is to start wireshark and capture all the data and filter the XML out of it. When you actualy perform those actions. I suppose you can do this as well with the emulator. Regards Eelco ________________________________________ Van: Cisco Developer Community Forums [cdicuser@developer.cisco.com] Verzonden: maandag 8 oktober 2012 13:52 Aan: cdicuser@developer.cisco.com Onderwerp: New Message from Helmut Pfeiler in Unified Computing UCS Manager - Technical Discussions: How to start, stop, reboot a Blade Server via XML API Helmut Pfeiler has created a new message in the forum "Technical Discussions": -------------------------------------------------------------- Hi all I'm new to the UCS and the XML API, so I'm sure this is a stupid question. I'm able to read blade information via XML API and also to associate service profile to a blade server. But till now I did not find a way to start, stop and reboot the blade server via XML API. Could anyone point me to the correct XML command to start, stop and reboot a blade server. Many thanks in advance Helmut -- To respond to this post, please click the following link: or simply reply to this email.

RE: get available login domain from UCS

2012-08-28T07:41:11Z

After checking the data received from FI when opening the KVM console I found the info I was looking for. ucsm/domains.cgi gives you the xml containing the domains.

get available login domain from UCS

2012-08-27T17:17:35Z

I am working on a custom login portal to an UCS system to do some basic stuff. However I don't understand how i can retrieve the login domain. When I use the gui it gives me the available authentication domains prior to authentication. I captured the data when I download the jar files but i can't find any XML which gives me this data.

Re: New Message from Sage Harvey in Unified Computing UCS Manager - Technic

2012-02-09T17:16:07Z

I have written some functions in perl to retrieve all kind of info. Let me know if interested. Op 9 feb. 2012 om 17:11 heeft "Cisco Developer Community Forums" het volgende geschreven: > Sage Harvey has created a new message in the forum "Technical Discussions": > > -------------------------------------------------------------- > Hi Vamsi, > > I had the need for something similar so I ended up using the XML API from a PHP script running on linux. This is what I use: > 1 > 2 3 require_once 'HTTP/Request2.php'; > 4 $ucsDomains = array(); > 5 $myLogin = "ucs-AD\\someuser"; // Using AD authentication, local accounts would work too. > 6 $myPassword = "somepassword"; > 7 > 8// Load up all the UCSM's > 9 array_push($ucsDomains, array("url" => "http://ucs01/")); > 10 array_push($ucsDomains, array("url" => "http://ucs02/")); > 11 array_push($ucsDomains, array("url" => "http://ucs03/")); > 12 > 13 foreach($ucsDomains as $ucsDomain){ > 14 generateData($ucsDomain, $myLogin, $myPassword); > 15 } > 16 > 17 function generateData($details, $myLogin, $myPassword) { > 18 $chassisTypes = array( > 19 "N20-C6508" => "5108"); > 20 $Blades = array( > 21 "N20-B6620-1" => "B200 M1", > 22 "N20-B6625-1" => "B200 M2", > 23 "N20-B6625-2" => "B250 M2", > 24 "N20-B6730-1" => "B230 M1", > 25 "B230-BASE-M2" => "B230 M2", > 26 "N20-B6620-1" => "B200 M1", > 27 "N20-B6740-2" => "B440 M1"); > 28 $fabricInterconnects = array( > 29 "N10-S6100" => "6120XP", > 30 "N10-S6200" => "6140XP"); > 31 $url = $details['url']."nuova"; > 32 $aaaLogin = ""; > 33 $results = httpPost($url, $aaaLogin); > 34 $outCookie = $results->attributes()->outCookie; > 35 > 36// Get Cluster name > 37 $xmlQuery = ""; > 38 $results = httpPost($url, $xmlQuery); > 39 $clusterName = $results->outConfigs->topSystem['name']; > 40 > 41 > 42 $xmlQuery =<< 43 > 44 > 45 > 46 > 47 > 48EOD; > 49 $results = httpPost($url, $xmlQuery); > 50 $firmwareBootUnit = $results->outConfigs->firmwareBootUnit; > 51 > 52 $fwResults = ""; > 53 foreach($firmwareBootUnit as $datum) { > 54 if ($datum['dn'] == "sys/mgmt/fw-boot-def/bootunit-system") { > 55// Found UCSM > 56 $fwResults .= "$clusterName,UCSM,".$datum['version'].",".$datum['prevVersion'].",_".$datum['dn']."
\n"; > 57 } > 58 if (preg_match("/^sys\/(switch-[AB])\/mgmt\/fw-boot-def\/bootunit-kernel/", $datum['dn'])) { > 59// Found a Fabric Interconnect > 60 $fwResults .= "$clusterName,Fabric Interconnect,".$datum['version'].",".$datum['prevVersion'].",_".$datum['dn']."
\n"; > 61 } > 62 if (preg_match("/^sys\/(chassis-[0-9]\/slot-[0-9])\/mgmt\/fw-boot-def\/bootunit-combined/", $datum['dn'])) { > 63// Found an IOM > 64 $fwResults .= "$clusterName,Fabric Extender,".$datum['version'].",".$datum['prevVersion'].",".$datum['dn']."
\n"; > 65 } > 66 if (preg_match("/^sys\/(chassis-[0-9]\/blade-[0-9])\/mgmt\/fw-boot-def\/bootunit-combined/", $datum['dn'])) { > 67// Found a CIMC > 68 $fwResults .= "$clusterName,CIMC,".$datum['version'].",".$datum['prevVersion'].",".$datum['dn']."
\n"; > 69 } > 70 if (strpos($datum['dn'], "bios")) { > 71// Found a blade's BIOS > 72 $fwResults .= "$clusterName,Blade BIOS,".$datum['version'].",".$datum['prevVersion'].",".$datum['dn']."
\n"; > 73 } > 74 if (preg_match("/^sys\/(chassis-[0-9]\/blade-[0-9]\/adaptor-[0-9])\/mgmt\/fw-boot-def\/bootunit-combined/", $datum['dn'])) { > 75// Found an Interface Card > 76 $fwResults .= "$clusterName,Interface Card,".$datum['version'].",".$datum['prevVersion'].",".$datum['dn']."
\n"; > 77 } > 78 } > 79 echo "Cluster,Type,Current Version,Prev/Backup Version,Node
"; > 80 > 81 $fwResults = str_replace ("/fw-boot-def/bootunit-system", "", $fwResults); > 82 $fwResults = str_replace ("/mgmt/fw-boot-def/bootunit-kernel", "", $fwResults); > 83 $fwResults = str_replace ("/mgmt/fw-boot-def/bootunit-combined", "", $fwResults); > 84 $fwResults = str_replace ("/bios/fw-boot-def/bootunit-combined", "", $fwResults); > 85 echo $fwResults; > 86 echo ""; > 87 echo "

\n"; > 88 > 89// Logout > 90 $aaaLogout = ""; > 91 $results = httpPost($url, $aaaLogout); > 92 $outStatus = $results->attributes()->outStatus; > 93 } > 94 > 95 function httpPost($url, $package){ > 96 $request = new HTTP_REQUEST2($url, HTTP_REQUEST2::METHOD_POST); > 97 $request->setHeader("Content-type: text/xml"); > 98 $request->setBody($package); > 99 $response = $request->send(); > 100 $xml = new SimpleXMLElement($response->getBody()); > 101 return $xml; > 102 } > 103?> > > > The output would end up looking something like this: > 1 > 2Cluster,Type,Current Version,Prev/Backup Version,Node > 3ucs01,UCSM,2.0(1q),1.4(1j),_sys/mgmt > 4ucs01,Fabric Interconnect,5.0(3)N2(2.1q),4.2(1)N1(1.4j),_sys/switch-B > 5ucs01,Fabric Interconnect,5.0(3)N2(2.1q),4.2(1)N1(1.4j),_sys/switch-A > 6ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-4/slot-1 > 7ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-1/slot-1 > 8ucs01,CIMC,2.0(1q),1.4(1j),sys/chassis-1/blade-1 > 9ucs01,CIMC,2.0(1q),1.4(1j),sys/chassis-1/blade-3 > 10ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-1/slot-2 > 11ucs01,CIMC,2.0(1q),1.4(1j),sys/chassis-4/blade-1 > 12ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-2/slot-1 > 13ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-3/slot-1 > 14ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-3/slot-2 > 15ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-4/slot-2 > 16ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-1/blade-3/adaptor-2 > 17ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-1/blade-3/adaptor-1 > 18ucs01,Fabric Extender,2.0(1q),1.4(1j),sys/chassis-2/slot-2 > 19ucs01,CIMC,2.0(1q),1.4(1j),sys/chassis-3/blade-3 > 20ucs01,CIMC,2.0(1q),1.4(1j),sys/chassis-2/blade-1 > 21ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-1/blade-1/adaptor-2 > 22ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-1/blade-1/adaptor-1 > 23ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-4/blade-1/adaptor-2 > 24ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-4/blade-1/adaptor-1 > 25ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-2/blade-1/adaptor-2 > 26ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-2/blade-1/adaptor-1 > 27ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-3/blade-3/adaptor-2 > 28ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-3/blade-3/adaptor-1 > 29ucs01,Blade BIOS,B440.2.0.1c.0.100520111754,B440M1.1.4.1b.0.120820101442,sys/chassis-1/blade-1 > 30ucs01,Blade BIOS,B440.2.0.1c.0.100520111754,B440M1.1.4.1b.0.120820101442,sys/chassis-4/blade-1 > 31ucs01,Blade BIOS,B440.2.0.1c.0.100520111754,B440M1.1.4.1b.0.120820101442,sys/chassis-1/blade-3 > 32ucs01,Blade BIOS,B440.2.0.1c.0.100520111754,B440M1.1.4.1b.0.120820101442,sys/chassis-2/blade-1 > 33ucs01,Blade BIOS,B440.2.0.1c.0.100520111754,B440M1.1.4.1b.0.120820101442,sys/chassis-3/blade-3 > 34ucs01,Blade BIOS,B440.2.0.1c.0.100520111754,B440M1.1.4.1b.0.120820101442,sys/chassis-3/blade-1 > 35ucs01,CIMC,2.0(1q),,sys/chassis-3/blade-1 > 36ucs01,Interface Card,2.0(1q),1.3(0.841),sys/chassis-3/blade-1/adaptor-2 > 37ucs01,Interface Card,2.0(1q),1.4(1j),sys/chassis-3/blade-1/adaptor-1 > > > Hope that helps. > > Sage > -- > To respond to this post, please click the following link: > > > > or simply reply to this email.

RE: Testing authentication with UCSPE

2012-02-07T07:44:08Z

[quote] Yes that is convenient sometimes but if you are building a multicustomer environment with locales and AD integration it would be nice to be sure that everything is indeed secure. You are correct that the emulator doesn't support authentication today, as in passwords that are configured in the emulator aren't checked today. You can test locales thought (without AD of course). Create any user, with a locale defined, and if user say "bob" was created w/ locale "test", when you log into the emulator today w/ a created user that is defined (no matter what the password is) with a particular role, that user will get the role you had set. We have AD integration and true authentication on the roadmap for a future release of the emulator. Eric[/quote] Thanks Eric I didn't know that will look into that.

RE: best way to query WWPN of all HBA

2012-02-06T12:50:25Z

I do not have any issues generating the required XML I am just wondering what would be the best approach. Furthermore I don't think those cmdlets will run very well on my linux management station.

RE: Testing authentication with UCSPE

2012-02-06T12:47:40Z

Yes that is convenient sometimes but if you are building a multicustomer environment with locales and AD integration it would be nice to be sure that everything is indeed secure.

RE: best way to query WWPN of all HBA

2012-02-06T11:56:46Z

From the UCS XML API Reference [code] lsInstantiateNNamedTemplate XML API reference For a specified service template, the lsInstantiateNNamedTemplate method instantiates as many service profiles as are specified in the namedSet parameter. ¿dn¿Specifies the service template used for instantiating. ¿nameSet¿Contains the names of the service profiles to be instantiated. ¿targetOrg¿Specifies the organization in which these service profiles are instantiated. [/code] [code] lsInstantiateNTemplate The lsInstantiateNTemplate method creates a number (N) of service profiles from a template. [/code] [code] lsInstantiateTemplate The lsInstantiateTemplate method creates one service profile from a specified template. [/code] the first and last one allows you to create profiles in line with your company naming conventions. The one in the GUI forces you to accept a number suffix even when creating a single profile.

RE: best way to query WWPN of all HBA

2012-02-06T10:35:38Z

Why would you get first the DN and then get all the info for that while you can do it one query by doing a configResolveClass with a filter? At the moment I have written all the Perl code to get all the relevant server info in a Perl XML object. I can retrieve everything I want but I was wonder if my approch would be the quickes/most efficient. When I am back at home I will post my queries to show how my script has been done. BTW I think I will integrate it with a script which can instantiate profiles from templates. For some reason there are more options to create profiles with the XML interface that with the GUI.

best way to query WWPN of all HBA

2012-02-03T08:07:24Z

Because I find it very boring (and I am lazy) to create aliases and zones for all HBA's of my server profiles in my MDS switch I would like to write a script to do it for me. I am just curious about the best way to do it. My approach is - do a configResolveClass with inHierarchical="true" for all classes of lsServer add a filter to exclude the templates - check which profiles have a childobject vnicFc (hence the inHierarchical="true") - if they have a childobject vnicFc get all the details relevant for my zoning/aliases from it (and its child vnicFcIf) I think the other way round is also possible - get all configured VSAN on the UCS FI - query vnicFcIf placed in that VSAN - get the parent of the vnicFcIf to get the relevent addresses. what should be the fastest/least impacting. I also noticed something I nevert thought about. I would like to create an alias [i]profilename-hba [/i]however the profilename can be the same as long as they are in two different organizations.

what would you like to have scripted

2012-01-18T10:29:34Z

The last couple of weeks I have been refreshing and expanding my Perl knowledge by writing some common code to interface with an UCS environment. So far it has been more excersise than usefull. I am asking mysef now: what would be usefull in real life? As a consultant I usually only deploy systems and be done with it so no day to day operations. Which tasks do you see which are be done via the gui but are repetitive and could be scripted?

RE: Testing authentication with UCSPE

2011-10-10T14:44:19Z

I found in the UCSPE guide that indeed authentication is not yet supported. Really would like to see this being supported in a future release though.

Testing authentication with UCSPE

2011-08-26T08:51:23Z

I am trying to test authentication with UCS but so far it doesn't seem to be possible with the emulator. Does the emulator only support XML development?