SSO Access for NNMi

To browse among several NNMi management servers, you must do one of the following:

Note When making file changes under High Availability (HA), you must make the changes on both nodes in the cluster. If the change requires you to stop and restart the NNMi management server, you must put the nodes in maintenance mode before running the ovstop and ovstart commands. See Maintenance Mode for more information.

  • Edit the nms-ui.properties file and make the parameter values for com.hp.nms.ui.sso.initString and com.hp.nms.ui.sso.protectedDomains the same among the NNMi management servers. Make sure to set the com.hp.nms.ui.sso.domain parameter to match the domain an NNMi management server resides in.

  • Edit the nms-ui.properties file and make sure you have SSO disabled. See Disabling SSO for more information.

If you choose to not complete one of these actions, each time you browse to a different NNMi management server, you will be automatically signed out of the previous NNMi management server.

There are special considerations for using SSO with the NNMi global network management feature. See Configuring Single Sign-On for Global Network Management for more information.

If the domain name of the NNMi management server is short, as in mycompany, without any period (.), the NNMi console will immediately sign you out. The restrictions for SSO browser cookies require a domain name to contain at least one period, such as mycompany.com. To remedy this situation, complete the following steps:

  1. Open the following file in a text editor:

    • Windows: %NNM_PROPS%/nms-ui.properties
    • Linux: $NNM_PROPS/nms-ui.properties
  2. For this example, search for the following string:

    com.hp.nms.ui.sso.domain = mycompany

    and replace it with the following string:

    com.hp.nms.ui.sso.domain = mycompany.com
  3. Run the following command to commit the changes:

    nnmsso.ovpl -reload

    See the nnmsso.ovpl reference page, or the Linux manpage, for more information.