I had Dell’s OpenManage running on Citrix XenServer 4.5, along with MRTG & Munin. Life was good. Then we did the upgrade thing, wiping all that goodness out. We have a month old backup of the CentOS installation, which has most of the configurations. The only thing I really lost was some of the latest MRTG config updates.
The documentation[1] I followed[2] from GeekPoet is in several pieces, so I’m going to consolidate them here so I don’t forget anything the next time. MajorProps(tm) go to GeekPoet for the initial gathering of info and working out the installation. PLEASE – read the [2] link (below) for some of the background, and a list of software you’ll be working with. In this case, I’m working with Citrix XenServer 5.0, Open Manager 5.4.0/A01. You’ll also need a Windows Management box running OpenManage Management Station[7] (Warning – 288MB), and it’s Service Pack[8] (Warning 44MB)
First Steps – SNMPD
The upgrade left the stuff we really care about in place, so the VM’s are there, the network configs and everything else about a stock install of XenServer. We’re running this on a new Dell PowerEdge 2950. We have some SNMP monitoring going on and that needed to be running immediately.
# /etc/init.d/snmpd start
# chkconfig --list snmpd
snmpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
# chkconfig snmpd on
# chkconfig --list snmpd
snmpd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
You’ll also need to change /etc/snmp/snmpd.conf, changing public in the following line to your own community string
com2sec notConfigUser default public
This will get you over the hump if your management system is already polling for snmp status. Eventually we’ll need the following. Replace MY_READ, MY_WRITE and my.openmanage.server with your own info
# Map users to community strings
# sec.name source community
com2sec U_ReadOnly default MY_READ
com2sec U_ReadWrite default MY_WRITE
# Map users to groups
# groupName securityModel securityName
group G_ReadOnly any U_ReadOnly
group G_ReadWrite any U_ReadWrite
# create view
# name incl/excl subtree mask(optional)
view all included .1
# grant rights to the above views
# group context sec.model sec.level prefix read write notif
access G_ReadOnly "" any noauth exact all none none
access G_ReadWrite "" any noauth exact all all none
# Set trap destination
trapsink my.openmanage.server MY_MANAGEMENT
# Allow localhost access
rocommunity MY_READ 127.0.0.1
rwcommunity MY_WRITE 127.0.0.1
# Allow remote hosts access
rocommunity MY_READ my.openmanage.server
rwcommunity MY_WRITE my.openmanage.server
# Below has been left in from the default snmpd.conf file:
syslocation Unknown (edit /etc/snmp/snmpd.conf)
syscontact Root (configure /etc/snmp/snmp.local.conf)
# Added for support of bcm5820 cards.
pass .1.3.6.1.4.1.4413.4.1 /usr/bin/ucd5820stat
# Allow Systems Management Data Engine SNMP to connect to snmpd using SMUX
smuxpeer .1.3.6.1.4.1.674.10892.1
First Steps – resolv.conv
Also, the upgrade wiped out the /etc/resolv.conf file. We’re not using DHCP, and this install of CentOS overwrites this file on boot. I’ll need to clean this up later…
Contents of /etc/resolv.conf
domain example.com[4]
nameserver 10.0.0.1
nameserver 10.0.0.2
Then make a copy of it for later
# cp /etc/resolv.conf /etc/resolv.conf.saved
First Steps – getting lockfile
We’re going to need to change yum repositories in order to get lockfile, which we’ll need of OM. In XS5.0, they’ve moved the repositories.
# find /* | grep repos.d
/etc/yum.repos.d
/etc/yum.repos.d/CentOS-Media.repo
/etc/yum.repos.d/CentOS-Base.repo
/etc/yum.repos.d/XenSource.repo
# vi /etc/yum.repos.d/XenSource.repo
Change enabled=1 to enabled=0
# vi /etc/yum.repos.d/CentOS-Base.repo
Change enabled=0 to enabled=1 in first base section at top of file.
yum whatprovides lockfile tells us that installing procmail will give us the executable we need. To get it, we do the following:
# yum install procmail
# which lockfile tells us it’s in /usr/bin
# cp /usr/bin/lockfile /root
# yum remove procmail
# mv /root/lockfile /usr/bin
# which lockfile Just to make sure it’s where we think it is.
IPTables
Make a copy of iptables, & add the three bold lines below.
# cp /etc/sysconfig/iptables /etc/sysconfig/iptables.orig
# vi /etc/sysconfig/iptables
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 161 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 162 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1311 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 694 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
Moving On – OpenManage Install
GeekPoet installed with OM 5.3.0/A00[5], I’m going to try OM 5.4.0/A01[6]. Get it on your server however you can.
Unpack the file
Make a temp directory for it & copy the distro into the temp directory & then unpack
# mkdir OpenManage
# cp OM_5.4.0_ManNode_A01.tar.gz OpenManage
# cd OpenManage
# dir
OM_5.4.0_ManNode_A01.tar.gz
# tar zxpf OM_5.4.0_ManNode_A01.tar.gz
# dir
COPYRIGHT.txt docs license.txt linux OM_5.4.0_ManNode_A01.tar.gz readme1st.txt setup.sh
Alter setup.sh
Change the lines 2972 and 2973 as follows:
2972: GBL_OS_TYPE=${GBL_OS_TYPE_UKNOWN}
2973: GBL_OS_TYPE_STRING="UKNOWN"
Become:
2972: GBL_OS_TYPE=${GBL_OS_TYPE_RHEL5}
2973: GBL_OS_TYPE_STRING="RHEL5"
Install the OpenManage Software
cd to your temp directory where you unpacked the software. I chose /root/OpenManage. At the command prompt type ./setup.sh. I chose option 6, GeekPoet recommends leaving off option 2, the webserver adds 100M RAM utilization. Then choose option i to install. When it asks to start the services, type y. It’ll look like:
Installing the selected packages.
warning: instsvc-drivers-5.4.0-260.i386.rpm: Header V3 DSA signature: NOKEY, key ID 23b66a9d
Preparing... ########################################### [100%]
1:srvadmin-omilcore ########################################### [ 6%]
To start all installed services without a reboot,
enter the following command: srvadmin-services.sh start
2:srvadmin-syscheck ########################################### [ 12%]
3:srvadmin-deng ########################################### [ 18%]
4:srvadmin-omauth ########################################### [ 24%]
5:srvadmin-omacore ########################################### [ 29%]
6:srvadmin-jre ########################################### [ 35%]
7:srvadmin-ipmi ########################################### [ 41%]
8:srvadmin-hapi ########################################### [ 47%]
9:srvadmin-isvc ########################################### [ 53%]
10:srvadmin-rac5-component########################################### [ 59%]
11:instsvc-drivers ########################################### [ 65%]
12:srvadmin-cm ########################################### [ 71%]
13:srvadmin-iws ########################################### [ 76%]
14:srvadmin-omhip ########################################### [ 82%]
15:srvadmin-racadm5 ########################################### [ 88%]
16:srvadmin-racdrsc5 ########################################### [ 94%]
17:srvadmin-storage ########################################### [100%]
Do you want the Server Administrator services started?
Press ('y' for yes | 'Enter' to exit): y
Starting Systems Management Device Drivers:
Starting dell_rbu: [ OK ]
Starting ipmi driver: [ OK ]
Starting Systems Management Data Engine:
Starting dsm_sa_datamgr32d: [ OK ]
Starting dsm_sa_eventmgr32d: [ OK ]
Starting dsm_sa_snmp32d: [ OK ]
Starting DSM SA Shared Services: OK [ OK ]
Starting DSM SA Connection Service: [ OK ]
it looks like it added:
-rwxr-xr-x 1 root root 36531 Sep 29 10:57 dataeng*
-rwxr-xr-x 1 root root 6847 Sep 29 10:57 dsm_om_shrsvc*
-rwxr-xr-x 1 root root 73016 Sep 29 10:57 instsvcdrv*
-rwxr-xr-x 1 root root 14006 Sep 29 10:57 dsm_sa_ipmi*
-rwxr-xr-x 1 root root 7589 Sep 29 10:57 dsm_om_connsvc*
-rwxrwxr-x 1 root root 2113 Sep 29 10:57 mptctl*
These bad-boys will need to start at boot time. run chkconfig --list for each of these services to see if they’re set to run at startup. In my case, looks like we’re in bidness:
# chkconfig --list dataeng
dataeng 0:off 1:off 2:off 3:on 4:on 5:on 6:off
# chkconfig --list dsm_om_shrsvc
dsm_om_shrsvc 0:off 1:off 2:off 3:on 4:on 5:on 6:off
# chkconfig --list instsvcdrv
instsvcdrv 0:on 1:off 2:off 3:on 4:on 5:on 6:on
# chkconfig --list dsm_sa_ipmi
dsm_sa_ipmi 0:off 1:off 2:off 3:off 4:off 5:off 6:off
# chkconfig --list dsm_om_connsvc
dsm_om_connsvc 0:off 1:off 2:off 3:on 4:on 5:on 6:off
# chkconfig --list mptctl
mptctl 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Some final notes:
The script to turn the services on & off is /opt/dell/srvadmin/omil/supportscripts/srvadmin-services.sh, and there’s an uninstall script there too, in case you need it.
Finally, check out GeekPoet’s packaging step #6[2]. It might have saved me from this whole excercise.
Links in this article:
[1] http://blog.geekpoet.net/2008/03/how-to-install-dell-openmanage-530-on.html
[2] http://blog.geekpoet.net/2008/05/howto-install-dell-openmanage-53-on.html
[3] http://blog.geekpoet.net/2008/05/issue-with-dell-openmanage-53-inventory.html
[4] http://en.wikipedia.org/wiki/Example.com – a bit of internet trivia
[5] http://ftp.us.dell.com/sysman/OM_5.3.0_ManNode_A00.tar.gz
[6] http://ftp.us.dell.com/sysman/OM_5.4.0_ManNode_A01.tar.gz
[7] http://ftp.us.dell.com/sysman/OM_5.4.0_MgmtStat_A00.exe
[8] http://ftp.us.dell.com/sysman/OM_5.4.0_MgmtStat_A00.msp