Top
Systemwalker Service Quality Coordinator User's Guide
Systemwalker

3.2.2 Settings for Monitored Servers

If the server to be monitored is a VMware ESX server

When communicating by ssh
  1. Create a user so that connections can be made remotely.

    1. Log into the VMware ESX host directly with the VMware Client.

      • For ESX 3.5
        Log into the VMware ESX host directly with the VMware Infrastructure Client.

      • For ESX 4.0
        Log into the VMware ESX host directly with the VMware vSphere Client.

      Note

      • For ESX 3.5
        Users cannot be created if VirtualCenter is logged into. Log into the VMware ESX host directly.

      • For ESX 4.0
        Users cannot be created if vCenter Server is logged into. Log into the VMware ESX host directly.

    2. Select the server from the pane at the left.

    3. Click the Users & Groups tab and click Users.

    4. Right-click on the user table and click Add.

    5. The Add New User dialog opens.

    6. Set the login, user name, numeric user ID (UID) and password.

    7. Select Grant shell access to this user.

    8. Input the group name for each existing group that the user is to be added to and click Add.

    9. Click the OK button.

  2. Make settings to have the SSH server start automatically.

    Point

    The VMware ESX SSH server is set to start automatically by default.

    Refer to the VMware manual for information about how to start and set the SSH server.

  3. Connect to the set server with ssh and confirm that you can log in with the created user.

  4. Add the right to execute the command used to collect performance information to the created user.

    Execute the following settings:

    1. Log into VMware as a superuser.

    2. Execute the visudo command and edit the sudoers file.

      # /usr/sbin/visudo

    3. Add the following lines to the end of the sudoers file and save it.
      The following example shows the connection account with "user1". Change to match the actual connection account.

      Settings example

      user1 ALL=(ALL) NOPASSWD: /usr/bin/esxtop
      user1 ALL=(ALL) NOPASSWD: /usr/sbin/esxcfg-vmhbadevs
      user1 ALL=(ALL) NOPASSWD: /usr/sbin/vdf
      user1 ALL=(ALL) NOPASSWD: /usr/sbin/esxcfg-nics
      user1 ALL=(ALL) NOPASSWD: /usr/sbin/esxcfg-vswitch
      user1 ALL=(ALL) NOPASSWD: /bin/egrep
      user1 ALL=(ALL) NOPASSWD: /usr/sbin/esxcfg-scsidevs

    4. Log into the connection account and execute the "sudo -l" command.

      $ sudo -l

      Execution result example

      $ sudo -l
      User user1 may run the following commands on this host:
      (ALL) NOPASSWD: /usr/bin/esxtop
      (ALL) NOPASSWD: /usr/sbin/esxcfg-vmhbadevs
      (ALL) NOPASSWD: /usr/sbin/vdf
      (ALL) NOPASSWD: /usr/sbin/esxcfg-nics
      (ALL) NOPASSWD: /usr/sbin/esxcfg-vswitch
      (ALL) NOPASSWD: /bin/egrep
      (ALL) NOPASSWD: /usr/sbin/esxcfg-scsidevs


If the server to be monitored is a VMware ESXi server

  1. Create a user so that connections can be made remotely.

    1. Use VMware vSphere Client to log in directly to the VMware ESXi server using the system administrator account.

      Note

      Users cannot be created if vCenter Server is logged into. Log into the VMware ESXi server directly.

    2. Select the server from the pane at the left.

    3. Click the Users & Groups tab and click Users.

    4. Right-click on the user table and click Add.

    5. The Add New User dialog opens.

    6. Set the login, user name, numeric user ID (UID) and password.

    7. Select the Group membership group, then select the users group from the list and click Add.

    8. Click OK.

  2. Assign read permission to the created user.

    1. Select the server from the left pane.

    2. Right-click the server and then click Add Permission - the Assign Permissions dialog box opens.

    3. Click Add - the Select Users dialog box opens.

    4. From the list, select the user created in step 1, then click Add and OK.

    5. Select Read-Only as the role of the added user, then select the [Propagate to Child Objects] check box and click OK.

  3. Check the user settings.

    1. Select the server from the left pane.

    2. Click the Permissions tab, and make sure that the created user is displayed in the list.


If the monitored server is a Hyper-V

  1. Create a user so that connections can be made remotely.

    Do not specify "User must change password at next logon" for the user.

  2. Add a user to the groups necessary for connecting remotely and collecting information ("TelnetClients" group and "Performance Monitor Users" group).

    Follow these steps to make the settings.

    1. Create a "TelnetClients" local group.

      1. Open Computer Management.

      2. In the console tree, expand Local Users and Groups and click Groups.

      3. If the "TelnetClients" group already exists in the list, skip the next step and go on to "b. Add user to the "TelnetClients" group".

      4. Right-click on Groups, and click New Group.

      5. In the New Group dialog, enter "TelnetClients". Add descriptions as required.

      6. If the user has already been created, click Add and enter the user name in the Select Users, Computers, or Groups dialog.

      7. Click Create.

    2. Add user to the "TelnetClients" group.

      1. Open Computer Management.

      2. In the console tree, expand Local Users and Groups and click Groups.

      3. Double-click the "TelnetClients" local group.

      4. Click Add.

      5. Follow the instructions in the Select Users, Computers, or Groups dialog to add the user to the "TelnetClients" group and click OK.

    3. Add user to the "Performance Monitor Users" group.

      1. Open Computer Management.

      2. In the console tree, expand Local Users and Groups and click Groups.

      3. Double-click the "Performance Monitor Users" group.

      4. Click Add.

      5. Follow the instructions in the Select Users, Computers, or Groups dialog to add the user to the "Performance Monitor Users" group and click OK.

    Note

    • From a security point of view, it is not recommended to use a user belonging to the Administrators group.

    • To open Computer Management, from the Windows Start menu, click Control Panel and double-click Administrative Tools >> Computer Management.

    • When entering the group name, be sure to spell "TelnetClients" as shown.

    • Users cannot logon after creating a "TelnetClients" group until the "Telnet Server" service is stopped and then started again.

  3. Make settings to have the "Telnet" service start automatically.

    Enable the "Telnet Server" function and set the "Telnet" service to start automatically.

    Note

    The "Telnet Server" function is disabled by default.

    The "Telnet" service is also set to not start automatically by default.

    The following describes how to enable the "Telnet Server" function and set the "Telnet" service to start automatically.

    1. Start the Windows Server Manager.

    2. Select Features in the tree on the left and click Add Features in the window on the right.

    3. Select Telnet Server and click Next.

    4. Click the Install button.


    When installation is finished, start Windows Services, and follow the steps below to have the Telnet service start automatically.

    1. Open Computer Management.

    2. In the console tree, click Services.

    3. Double-click the "Telnet" service.

    4. Make the startup type Automatic, change the service status to Start, and click OK.


  4. Change the maximum number of sessions that can be connected simultaneously with the "Telnet" service.

    The default maximum number of sessions that can be connected simultaneously with the "Telnet" service is "2".
    Set the maximum number of sessions with consideration for the number of sessions required shown in "Number of connection sessions".

    Use the Windows "tlntadmn" command to change the maximum number of sessions that can be connected simultaneously.

    tlntadmn config maxconn=<maximum number of connection sessions>

    Note

    This needs to be run with administrator privileges. To do so, from the Start menu, select All Programs, Accessories, then right-click Command Prompt and select Run as administrator. Now run the commands described below in the command prompt that appears.

    tlntadmn config maxconn=<maximum number of connection sessions>

  5. Logon to the computer with the new user.

    Note

    The user profile of the connecting user is necessary for connecting remotely and collecting information. For this reason, logon to the Windows computer as the connecting user.

  6. Connect to the set server with telnet and confirm that you can log in with the created user.


If the server to be monitored is a Red Hat Virtualization function (Xen) server

  1. Create a user so that connections can be made remotely.

  2. Make settings to have the ssh daemon start automatically.

    Install SSH if it is not already installed.
    Refer to the ssh manual for information about how to install and start the daemon.

  3. Connect to the set server with ssh and confirm that you can log in with the created user.

  4. Add the right to execute the command used to collect performance information to the created user.

    Execute the following steps:

    1. Login as a superuser to the Linux server where the Red Hat Virtualization function is operating.

    2. Execute the visudo command and edit the sudoers file.

      # /usr/sbin/visudo

    3. Add the following lines to the end of the sudoers file and save it.
      The following example shows the connection account with "user1". Change to match the actual connection account.

      Settings example

      user1 ALL=(ALL) NOPASSWD: /usr/sbin/xentop

    4. Log into the connection account and execute the "sudo -l" command.

      $ sudo -l

      Execution result example

      $ sudo -l
      User user1 may run the following commands on this host:
      (ALL) NOPASSWD: /usr/sbin/xentop