Softpanorama

May the source be with you, but remember the KISS principle ;-)
Home Switchboard Unix Administration Red Hat TCP/IP Networks Neoliberalism Toxic Managers
(slightly skeptical) Educational society promoting "Back to basics" movement against IT overcomplexity and  bastardization of classic Unix

Changing coreid of the node due to mismatch

News HP Operations Manager Recommended Links Changing OVcoreid of the node due to mismatch Undefined certificate state  
Policies Default Policy Groups node groups   Humor Etc

HPOM coreid exists both on the node and on the server and sometimes different coreID are generated on the server and on the node.  I found that if primary interface of the server is not used for HPOM communication, installation using inst.sh almost always produced this problem: agent is installed successfully but certificates are not  not installed so the node cannot communicate with the server.

Other important situation is removal of the node record on the server and then restoring it with opcnode command. 

Probably there are other cases that lead to the same result other then mutihomed servers.

In such case the first step is to compare coreid on the node and on the HPOM server.

On the server you can get node ID using the command

# opcnode -list_id node_name=nti178d.dmz2.firma.com 
List of IDs for node(s): 
Name = nti178d.dmz2.firma.com ID = bd995f0c-973b-754b-0718-afc25cde7f3f 
Operation successfully completed.

On the node

/opt/OV/bin/ovcoreid -show	bd995f0c-973b-754b-0718-afc25cde7f3f

To set ID on the node you can use command

ovcoreid -set bd995f0c-973b-754b-0718-afc25cde7f3f -force

To set ID on the server use

opcnode -chg_id node_name=nti179d.dmz2.firma.com id=8e475c38-8fb4-754b-0680-946436ccb281

On node the following commands need to be performed

export PATH=$PATH:/opt/OV/bin 
ovcoreid -show # get ID for importing into the server 
/opt/OV/bin/ovcert -importcert -file nti179d.cert -pass xyz1234 
rm nti179d.cert

On the server

opcnode -list_id node_name=nti179d.dmz2.firma.com
 opcnode -chg_id node_name=nti179d.dmz2.firma.com id=8e475c38-8fb4-754b-0680-946436ccb281
to check
opcnode -list_id node_name=nti179d.dmz2.firma.com

Create certificate

opccsacm -issue -name nti179d.dmz2.firma.com -file /tmp/nti179d.cert -pass xyz1234

scp /tmp/nti179d.cert [email protected]:/
opcragt -status nti179d.dmz2.firma.com

Restore certificate

ovcert -importcert -file /nti178d,cert -pass xyz1234

See also Undefined certificate state


Top Visited
Switchboard
Latest
Past week
Past month

NEWS CONTENTS

Old News

[Nov 18, 2010] OVcoreid mismatch

Oct 30, 2006 | IT Resource Center forums

Brian Curley :

We are presently seeing a rash of newly installed Linux nodes which generate the following error:

"The local core ID for node <nodename> is not the same as the core ID for this node stored in the OVO database! (OpC40-1900)"

When I check the what the core ID is in the OVO database, it *IS* the same as that which the node reports in response to a 'ovcoreid -show.' This has occured on several different servers. Sometimes it occurs immediately after the install, other times it occurs days later.

In most cases, doing an 'ovcoreid -set' with the '-force' option (effectively setting the coreid from X to X), followed by a 'opcagt -kill' and 'opcagt -start' has removed the error. However, we have now had the problem occur a second time on a server (after it was corrected by the method above).

Tony Cicone

Are you installing the agents from the command line, or the gui? When I install from the cli, I have to change the coreid manually, after granting the request.

(node)$ ovcert -certreq
(mgmt)$ ovcm -listpending
(mgmt)$ ovcm -grant <request>
(mgmt)$ opcnode -chg_id id=<coreid> node_name=<nodename>

Thanks.

Brandon V

Brian,

I had the exact same issue and reported it to HP support. These are a copy of the instructions HP support had me perform. I had already done this and kept getting the same results, that being that the core id was the same on the node and in the database:

Change the core ID of the node in OVO db to the local core id of the agent with the opcnode command. On the node you issue ovcoreid ... that give you the coreid then you can issue the following on the Management Server:
/opt/OV/bin/OpC/utils/opcnode -chg_id node_name=Name_of_Managed_Node id='core_id_string'
Then verify the work:
/opt/OV/bin/OpC/utils/opcnode -list_id node_list='Name_of_Managed_Node'
After about 5 months of going around about this issue they sent me a "hotfix"

HOTFIX DESCRIPTION:

PROBLEM : coreid mismatch error received, but coreid is identical on node and in database

FILES :

HP-UX: coreid-hpux.tar (includes two files)

# cksum libopcdb.sl
3002505180 3391488 libopcdb.sl
# cksum ovoareqsdr
873010857 1286256 ovoareqsdr
This did not work for me, however and I have not re-visted this issue. Hope this helps

[Nov 18, 2010] IT Resource Center forums - Certificate Issue - This thread has been closed

Why this guy problem was a closed filewall port, the same symptoms are in case OVcoreid is missing iether on the server or node or they mismatch.

Feb 19, 2009

Salman AlBedaiwi

I installed agent in windows server located behind fierwall
i already open port 383 both ways from the fierwall .
After installing the agtent in the node i recive the certificate in the managment server.
I map it to the node and grant it but i got this erroe

Error: 'Node' - Signed certificate could not be delivered to node. Could not send response after 120 retries (OpC40-2063)
"

i recheck the fierwall and the node everything was working Fine but i tried to resend the certficate and grant it again but still face the same problem .

the telnet from the node to MgmSrv through port 383 is working Ok also the coreid is matching

Node#ovcert -check

OvCoreId set : OK
Private key installed : Failed
Certificate installed : Failed
Certificate valid : Failed
Trusted certificates installed : Failed
Trusted certificates valid : Failed

i used the Attached doucment but it didnt solve my issue

Ramki

1. Have you checked if communication from management server to node is working?
Run following command from management server:

#bbcutil -ping http://<node name>

If you get the status as "status=eServiceOK" communication is working fine.

If the communication is fine, try to grant the certificate again.

HTH,
Ramki >

From the management server, try:
a) telnet <agent node>
If it passes, restart agent on the node
b) ovc -kill;ovc -start
c) Now try :
telnet <agent node> 383

Thanks
Ramki

AsHiSh JoHaRi

Try This:

1.On Management server

opcnode -del_node net_type=NETWORK_IP node_name=Managed_Node

2.On Managed Node

ovcert -list
ovcert -remove [o/p of previous command]
ovcoreid -create -force
ovcert -certreq




Etc

Society

Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy

Quotes

War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotesSomerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose BierceBernard Shaw : Mark Twain Quotes

Bulletin:

Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law

History:

Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOSProgramming Languages History : PL/1 : Simula 67 : C : History of GCC developmentScripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-MonthHow to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Hater’s Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D


Copyright © 1996-2021 by Softpanorama Society. www.softpanorama.org was initially created as a service to the (now defunct) UN Sustainable Development Networking Programme (SDNP) without any remuneration. This document is an industrial compilation designed and created exclusively for educational use and is distributed under the Softpanorama Content License. Original materials copyright belong to respective owners. Quotes are made for educational purposes only in compliance with the fair use doctrine.

FAIR USE NOTICE This site contains copyrighted material the use of which has not always been specifically authorized by the copyright owner. We are making such material available to advance understanding of computer science, IT technology, economic, scientific, and social issues. We believe this constitutes a 'fair use' of any such copyrighted material as provided by section 107 of the US Copyright Law according to which such material can be distributed without profit exclusively for research and educational purposes.

This is a Spartan WHYFF (We Help You For Free) site written by people for whom English is not a native language. Grammar and spelling errors should be expected. The site contain some broken links as it develops like a living tree...

You can use PayPal to to buy a cup of coffee for authors of this site

Disclaimer:

The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: March 12, 2019