- 13 Dec 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
Auto Discovery: Configure Service Account Credentials
- Updated on 13 Dec 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
This section provides information on configuring service account credentials that can be used for Nodegrid automated tasks, such as auto-discovery by using the second set of credentials for discovering Console and KVM Servers’ ports.
The discovery process requires logging into the appliance, and by default, it uses the credentials configured under Device :: Access, which are primarily intended for Console sessions. However, due to security policies, the same credentials cannot be used for both Console sessions and the discovery process. To align with these policies, we must define a dedicated authentication method, such as a service account specifically for automated tasks such as discovery. This ensures the credentials used for discovery are separate from those used for Console sessions.
Discovery Process: Typically requires Administrator-level credentials to access system information.
Console Sessions: Can be performed with User-level credentials, which can either be stored in Device :: Access or prompted at login.
Step 1: Create a Managed Device
To add a Console server managed device, follow these steps:
Navigate to Managed Devices :: Devices.
Click Add.
Enter a name for the managed device.
Select Type as console_server_nodegrid.
Enter the IP address of the managed device.
Under Credential select Ask During Login.
Select On-demand in the Mode drop-down.
Click Save.
Step 2: Set up the Console Server Credentials
After adding a Console server, you need to set up the credentials. Follow these steps to perform this task:
Click on the managed device name created in the above procedure.
Click Management.
The Discovery Ports will be selected by default. Leave the setting to enabled.
Provide username and password for logging in to the console server.
Click Save.
Step 3: Set up Discovery Rules
Create a rule to apply the cloning on the managed device. Follow these steps to perform this task:
Navigate to Managed Device :: AutoDiscovery :: Discovery Rules.
Click Add.
Enter a name for the discovery rule.
Select mode as Enabled.
Select the radio button Console Server Ports.
Select the Action as Clone (Mode On-demand).
From the drop-down Clone from: select the managed device name (created in the above procedure).
(Optional): Enable Enforce Device Type and Inherit Appliance Credentials.
Click Save.
Step 4: Start the Discovery Process
The discovery process runs at the configured interval but is triggered automatically when a new appliance is added to the platform. It can also be started manually if needed.
Navigate to Managed Devices:: Auto Discovery:: Discover Now.
Select the console server name.
Click Discover Now.
Step 5: View Discovery Logs
The Discovery Logs page shows the logs of the discovery processes set on the Managed Devices’ setting for auto discovery. In this example, you can see that the Action is Device Cloned for the Console Server Port.
Step 6: Access the Managed Device Appliance and Appliance Port
To access the managed device appliance (console server port), follow these steps:
Navigate to Access :: Tree. In the following figure, the managed device appliance has usbS3-2 port enabled that is cloned.
Click on Console button next to the managed device to access console session of the device. The session will request for access credentials to log in to the device.
Enter the login credentials to get access to the device.
Note
Similarly when you access the usbS3-2 port, you will be required enter the credentials (due to Access configuration Ask During Login).