DX Application Performance Management

APM v10.5.2 SP2 on RHEL

In my Dev Env.........when I login to the wkst......I don't see APM Status Console Icon

But in my Prod Env..........it's there:

Any idea why?

mparikh72

Your server.xml file might be missing 

<grant group="Admin" permission="full"/>

If you are not sure copy  your server.xml file from prod to dev env. 

if you copy server.xml file you have to restart your MOM. 

Thanks

my server.xml file already showing necessary properties:

<?xml version="1.0" encoding="UTF-8"?>
<server xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="server0.2.xsd" version="0.2">
<grant group="Admin" permission="full"/>
</server>

My domains.xml shows these properties (among others which are focused on a domain model per specific app):

<SuperDomain>
<agent mapping="(.*)"/>
<grant group="DL VAHN nosc.tools" permission="full"/>
<grant group="Admin" permission="full"/>
<grant user="Guest" permission="read"/>
</SuperDomain>

My users.xml looks like the following:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<principals xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="0.3" plainTextPasswords="false" xsi:noNamespaceSchemaLocation="users0.3.xsd">
<users>
<user password="" name="SaasAdmin"/>
<user password="" name="Admin"/>
<user password="2a.1000.a9hZlUjIZUVV4vMjkv3BtA==.Yswf7wbWLN6rvbfb9jaXoQ==" name="Guest"/>
<user password="2a.1000.qPZK3Ql/Swn0IX/5u6zdbA==.ayqr0jCCFDgjd7w6Tj96fg==" name="cemadmin"/>
</users>
<groups>
<group name="CEM Analyst" description="CEM Analyst Group"/>
<group name="CEM System Administrator" description="CEM System Administrator Group">
<user name="Admin"/>
<user name="cemadmin"/>
</group>
<group name="Admin" description="Administrator Group">
<user name="Admin"/>
<user name="cemadmin"/>
</group>
<group name="CEM Tenant Administrator" description="CEM Tenant Administrator Group">
<user name="SaasAdmin"/>
</group>
<group name="CEM Configuration Administrator" description="CEM Configuration Administrator Group"/>
<group name="CEM Incident Analyst" description="CEM Incident Analyst Group"/>
</groups>
</principals>

junaidwily LutzM

Thanks Manish for the update.

Dear Communty:
Can you help Manish?

Thanks

Hal German

mparikh72

They only problem I think is the user you are login in is not part of Admin group or you are using your LDAP user. if this is the case crease a LDAP group and add all your apm admin users into that group. add that group to your server.xml file. 

Hhope it will fix the problem. 

junaidwily

We are using LDAP for apm authentication. We don't use local login. We already have and LDAP group - DL VAHN nosc.tools - and we are all part of it. This exact same setup in Prod Env works as designed. There is not LDAP group added in server.xml file in prod and things work as designed

<?xml version="1.0" encoding="UTF-8"?>
<server xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="server0.2.xsd" version="0.2">
<grant group="Admin" permission="full"/>
</server>

Hello,

are you using LDAP to manage your users?

junaidwily is right, the user is not part of the "Admin" group used in the "system.xml", I think.

Add the group used by the user to the "system.xml" and you get access to Status Console.

Sorry,

Lutz

LutzM

Yes, I am using LDAP to manager users. Authentication occurs via LDAP but I think the authorization is happening via EEM. I don't know how I can a determine that. My realms.xml file has LDAP and EEM entity

I am not sure what you mean by systems.xml file. I don't have that filename anywhere on my EM/MoM.

Hello,

see the answer above.

I add additional groups to the "system.xml" used in our environment.

<?xml version="1.0" encoding="UTF-8"?>
<server xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="server0.2.xsd" version="0.2">
    <grant group="Admin" permission="full"/>
    <grant group="IS-full" permission="full"/>
</server>

Check you "users.xml" and "doamins.xml" to find the right one, used by the user.

A suggestion only,

Lutz

Thank you Lutz and Junaid for helping fellow Community members. Would love this to become the norm!

We don't have a systems.xml file. We are all out of the box .xml files. Would it help to troubleshoot this over a WebEx? I can set it up. Or I an share (privately) all of the .xml files with you from both of my environments.

Thanks

mparikh72

Let's try this. 

For example if you are using "mparikh72" to login to workstation and you are not able to see status console in investigator add "mparikh72" in server.xml file

<grant user="mparikh72" permission="full"/>

If it doesn't fix there might be a bug in your APM version.   or we can do WebEx.   

but in my prod environment, I don't have any issues at all with current config (identical to dev environment). So, I don't understand why I would need to add a specific user to the server.xml file. The dev env should work exactly like prod env.

And things were working just fine in dev environment also up untili some point this year where things went sideways.

junaidwily - can we do a WebEx and then if need be, I'll open up a case with CA Support.

Thanks

Manish

mparikh72

send me invite junaid_wahab@hotmail.com

This is a great example of what I would to see more of in this and every Community. One person helping another. Just as we do in our own real communities. Thank you junaidwily

mparikh72

Does it fixed? I am back from vacation and available for WebEx.

Dear Manish:

    This thread has gone back and forth for a while, If Manish;s suggestion does not help, you can take him on his suggestion for a Webex or open a support case. If you find a solution, please post to help others.

Thanks 

Hal German