Update "security_config_propagation = no" to all hubs in the domain
search cancel

Update "security_config_propagation = no" to all hubs in the domain

book

Article ID: 387304

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We are seeing ACLs and other hubs security changes overwritten by secondary hubs and going to implement this KB: Prevent Secondary hubs from propagating changes to the hub security.cfg

How can we implement this change in bulk to all our hubs, in a big environment, without doing this change manually on each one of them? 

Environment

DX UIM Any version

Cause

Guidance

Resolution

  • As per Prevent Secondary hubs from propagating changes to the hub security.cfg, if the primary hub.cfg keeps getting overwritten by secondary hubs, the solution is to set "security_config_propagation = no" to all hubs.
     
  • The attached batch script, facilitates this task for big environments. 

  • The Assumption is that all hubs are visible from the IM when logged from the primary hub. The script will will set "security_config_propagation" parameter as "no" in hub.cfg files.

 

  • Steps to use the script: 
    1. Download the ChangeHub.bat attached to his KB

    2. Verify the location of pu.exe. Example: "C:\Program Files (x86)\Nimsoft\bin\pu.exe"

    3. Edit the ChangeHub.bat script. The default path in the script for the pu.exe is "C:\Program Files (x86)\Nimsoft\bin\pu.exe". Update it according to your path so that the script can find and execute the pu. 

    4. Execute the batch script:

      ChangeHub.bat

    5. After running this script successfully, monitor the security.cfg for any unexpected change.

Additional Information

NOTE: This is a custom batch script, not supported by Broadcom. We recommend testing this script on non-production environments.

Attachments

ChangeHub.bat get_app