The roles configuration information for your sensors (and event collectors) is contained in the iss.access file located in the issdaemon directory. You can check, and modify, the roles by modifying this text file.
1) Stop the issdaemon service. 2) Open the iss.access file in notepad. 3) Edit the text in this file to include the desired roles, hostnames and usernames. Note that there is the "Roles" heading line, followed by heading lines for "KeyAdministrator" and "MasterStatusManager". The lines for each role entry in either section followthe same format except for the KeyAdministrator/MasterStatusManager designator. If your old sensor had the roles set up as you want the new sensor to be (and the old system is still available) then you can just copy the appropriate text out of the iss.access file of your old sensor. 4) Save the edited file, being careful to make sure that Windows doesn't try to append a ".txt" to the filename. 5) Restart the issdaemon service. Assuming your keys are properly configured, you should now have the desired roles capability. This is actually how I apply roles configurations for the 100+ consoles and event collecotrs and 1000+ sensors in my customer's enterprise. Doing it through the WGM just doesn't cut it at that scale. Hope this helps, - Jim -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pierquin Rudi Sent: Tuesday, May 04, 2004 7:46 AM To: [EMAIL PROTECTED] Subject: [ISSForum] Role Management Hello, In order to migrate the hardware platform of a Network sensor 7.0, I am preparing a new machine with the same configuration to replace it. First, I want to know if it possible to manually upgrade de XPU's. If not, i guess I have to do it through Workgroup Manager(I am using v 6.7) one by one ? Second, I have problems when i am trying to manage the new sensor from the workgroup Manager in my lab, I cannot seem to access the role management window. As a matter of fact, i cannot assign MasterStausManager role to my console, and i am getting error messages in my eventlog "access denied : xxx_xxx is not in the role MasterStatusManager". I installed NS 7.0. where I allowed my console to be key administrator. According to the doc, it shoul let me assign MasterStatusManager role from it. Does somebody knows how to fix this ? Many thanks, Rudi --------------------------------- Yahoo! Mail : votre e-mail personnel et gratuit qui vous suit partout ! Cr�ez votre Yahoo! Mail Dialoguez en direct avec vos amis gr�ce � Yahoo! Messenger ! _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
