logo       

RE: [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enable: msg#00555

sysutils.tivoli.tme10

Subject: RE: [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME

I think I understand your situation now... you definately have a difficult problem :)
 
Another thing you might be able to do is pull the IP address from inventory. I believe that the IP_ADDR_VIEW would have the actual IP of the endpoint.

Brian Duffy
brian.duffy-zVgB07JTx4c4Xc9VQZkPiQ@xxxxxxxxxxxxxxxx

 


From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx [mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On Behalf Of joel_n_mokoetle-n1yi7zhirBtBDgjK7y7TUQ@xxxxxxxxxxxxxxxx
Sent: Friday, February 25, 2005 11:35 AM
To: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject: RE: [tme10] [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME


Hi Brain,

Your strategy does sound good, but I don't think it quiet answers my dilemma. I am designing an automated endpoint installation solution. Part of this solution involves running pre-install prerequisites (i.e. run before allowing TMA code for installing an endpoint to execute on the target machine). One of these pre-install prerequisites is ensuring there isn't an endpoint instance in the TME bearing the same name as the FQDN name of the target machine. A cgi script does this instance check through the Tivoli Web Access component, and if it does find an endpoint instance for the machine a person is trying to install the TMA code on, it adds that problem to a report to feedback to the installer for further analysis. Now within this entry of the report, I would have wanted to include the IP ADDRESS of the endpoint instance found as part of the record. And that so far seems not possible using Tivoli commands, at least that's what I've gathered based on the great feedback the LIST has bounced on me.
The solution pulls down the TMA code from a central store to the target machine only when all the pre-install prereqs have been performed and are successful. The above is one check the many checks we don't want to allow the TMA code to be installed on the target machine before its satisfied because that leads to a lot of other problems as I am sure you have experienced with your Tivoli environments.
Hopefully the above is clear.

Thanks for your input,
Napo

***************************************************************
JPMorganChase - Systems & Service Management Tools Engineer
Tel: 614-213-8599
Pager: 888-636-2381
"If you look in your dictionary, you'll find that the meaning of the word 'single' is not single!" - UNKNOWN
*************************************************************



Joel N Mokoetle
"Duffy, Brian \(OFT\)" <Brian.Duffy-zVgB07JTx4c4Xc9VQZkPiQ@xxxxxxxxxxxxxxxx>
Sent by: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

02/25/2005 10:03 AM
Please respond to tme10

       
        To:        <tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx>
        cc:        
        Subject:        RE: [tme10] [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME



Joel -
 
The way that we handle these sort of situations is with a "penalty box". When new machines login to the TME, we first leave them assigned to the intercepting or seed gateway in the Hub region (ie penalty box). Then we check various things on the endpoint (dns resolution, are apps that break Tivoli on the endpoint, etc) and migrate the machine to its proper gateway in one of the spoke regions.
 
The advantage of this technique is that we can run tasks and check for more problems than you can with allow_install policies. The disadvantage is that there is a lag between when an endpoint initially logs into the TME and when it is actually assigned to its actual gateway to utilize Tivoli services.
 
You could easily use something like this to verify the IP or even MAC address of workstations to find duplicate machines.
 

Brian Duffy
brian.duffy-zVgB07JTx4c4Xc9VQZkPiQ@xxxxxxxxxxxxxxxx




From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx [mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On Behalf Of joel_n_mokoetle-n1yi7zhirBtBDgjK7y7TUQ@xxxxxxxxxxxxxxxx
Sent:
Thursday, February 24, 2005 5:22 PM
To:
tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject:
RE: [tme10] [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME



Thanks for your thoughts Ed. There are various ways that can be determined to get the IP Address "if" the endpoint's lcfd service/deamon is running on a machine! But let's consider a scenario where, there's no TMA code at the endpoint machine or the lcfd is not running, only the instance exists in the TME. My question is based on this scenario.


Kindly,

Napo


***************************************************************
JPMorganChase - Systems & Service Management Tools Engineer
Tel: 614-213-8599
Pager: 888-636-2381
"If you look in your dictionary, you'll find that the meaning of the word 'single' is not single!" - UNKNOWN
*************************************************************



Joel N Mokoetle
"Napier, Ed" <Ed.Napier-0VvZYiCTZkr6SQ/niu2adgC/G2K4zDHf@xxxxxxxxxxxxxxxx>
Sent by: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

02/24/2005 04:34 PM
Please respond to tme10

       
       To:        tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

       cc:        

       Subject:        RE: [tme10] [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME




Why not just create a task that ran a command (ipconfig) to tell you what the IP address is.  Then execute the task on the endpoint.  The IP address should be in the STDOUT.

 
Ed

 





From:
owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx [mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On Behalf Of joel_n_mokoetle-n1yi7zhirBtBDgjK7y7TUQ@xxxxxxxxxxxxxxxx
Sent:
Thursday, February 24, 2005 4:26 PM
To:
tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject:
Re: [tme10] [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME

 

Thanks Gary/Jason. From Gary's explanation, the IP of an endpoint instance in a NAT enable TME is not available from any object database or registry on the TME. Your explanation does make sense, unfortunately it only confirms my fears! Looks like I'll have to abandon the thought, unless someone comes up with some magical way of achieving the objective( to provide the installer with more information for further analysis when/where needed).


Thanks for all your swift assistance gents. Keep well and on track.


Napo

***************************************************************
JPMorganChase - Systems & Service Management Tools Engineer
Tel: 614-213-8599
Pager: 888-636-2381
"If you look in your dictionary, you'll find that the meaning of the word 'single' is not single!" - UNKNOWN
*************************************************************



Joel N Mokoetle

  Gary Hamilton <HAMILGAR-ygUJEDcBm8rQT0dZR+AlfA@xxxxxxxxxxxxxxxx>
Sent by: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

02/24/2005 03:33 PM
Please respond to tme10

       
      To:        tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

      cc:        

      Subject:        Re: [tme10] [TMF4.1.1] lowlevel command to obtain endpoint ip address    on NAT enabled TME









So you are asking for the real address of the endpoint that is on the other
side of a NAT firewall?

This information would not be available to the Endpoint Manager. In a
configuration like this, you would be using the name of the endpoint to
communicate with it, and the name is converted by the appropriate naming
service to an IP address, which will be converted to the real address when
it passes through the firewall.

An IP address may be stored in the Endpoint Manager database, but this
address is very likely to be the NAT'd address, not the real one. Is this
the IP address you are asking for?


Gary R. Hamilton
Team Leader
Senior Software Engineer
IBM Software Group - Tivoli Software (UK)
Global Response Team - Europe/Middle East/Africa
+44(0)1753-780-988
mobile: +44(0)780-820-3714
e-mail:hamilgar-ygUJEDcBm8rQT0dZR+AlfA@xxxxxxxxxxxxxxxx
____________________________________________
AskTivoli -  http://www-3.ibm.com/software/sysmgmt/products/support/
Web PMR submission - http://www-3.ibm.com/software/support/probsub.html


                                                                       
          joel_n_mokoetle@b                                            
          ankone.com                                                    
          Sent by:                                                   To
          owner-tme10@lists         <tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx>            
          .us.ibm.com                                                cc
                                                                       
                                                                Subject
          24/02/2005 17:10          [tme10] [TMF4.1.1] lowlevel command
                                    to obtain endpoint ip address on    
                                    NAT enabled TME                    
          Please respond to                                            
                tme10                                                  
                                                                       
                                                                       
                                                                       
                                                                       





Can someone please tell me the low level (i.e. objcall,idcall,etc.) command
to obtain the IP ADDRESS of an endpoint on a Tivoli Management Environment
that has NAT enabled? I need the IP as registered in on the TMR.

Thanking you in advance,
Napo

***************************************************************
JPMorganChase - Systems & Service Management Tools Engineer
Tel: 614-213-8599
Pager: 888-636-2381
"If you look in your dictionary, you'll find that the meaning of the word
'single' is not single!" UNKNOWN
*************************************************************

This transmission may contain information that is privileged, confidential
and/or exempt from disclosure under applicable law. If you are not the
intended recipient, you are hereby notified that any disclosure, copying,
distribution, or use of the information contained herein (including any
reliance thereon) is STRICTLY PROHIBITED. If you received this transmission
in error, please immediately contact the sender and destroy the material in
its entirety, whether in electronic or hard copy format. Thank you.


<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise