Adding a new access list entry

You can add a new access list entry using the Discovery Management Console. The steps for adding a new access list entry vary, based on the component type that you want to add. Use the Discovery > Access List to add a new access list entry. You can also programmatically add new access list entries using the Java™ API.

If you want to programmatically add new access list entries, or if you have a vendor supplied application and want to manage identities or change the password, use the Java API to carry out this task. For the Java API methods, see Managing access lists.

To add a new access list entry using the Discovery Management Console, complete the following steps:

  1. On the menu bar, click Discovery > Access List.
    The Access List pane is displayed.
  2. To add a new entry into the access list, click Add.
    The Access Details notebook is displayed.
  3. From the Component Type list, select the component type that you want to discover.
  4. For all component types other than Network Element (SNMP), complete the following steps:
    1. In the Name field, type the name of the access list entry.
    2. In the User name field, type the user name to log in to the component that you want to discover.

      When specifying a Windows domain user account, the domain name and user name must be separated by a backslash (\) as shown in the following example: DOMAIN\username.

    3. In the Password field, type the password to log in to the component that you want to discover.
    4. In the Confirm Password field, retype the password to log in to the component that you want to discover.
  5. Click OK to save your information.
    The Access List pane is displayed with the new information.
  6. Additional steps can be required based on the component type that you select. The following table identifies the component types and the additional fields and lists that you are required to complete for the access list entry.
    Table 1. Required component types, fields, and lists for access list entry
    Component Types Fields and Lists
    Application Server, Database, Messaging Servers
    Name
    Name to identify the device in the access list.
    User name
    User name to access the server.
    Password
    Password to access the server.
    Vendor
    The vendor of the server or database.
    CSM Server
    Name
    Name to identify the device in the access list.
    Password
    Password to access the server.
    User name
    User name to access the server.
    Cisco Device
    Name
    Name to identify the device in the access list.
    User name
    User name to access the device.
    Password
    The password for the Cisco device, if you are using Telnet protocol, SSH1 or SSH2.
    Enable Password
    The Enable password for the Cisco device, if you are using Telnet protocol, SSH1 or SSH2.
    Confirm Enable Password
    The Enable password for the Cisco device, if you are using Telnet protocol, SSH1 or SSH2.

    The Cisco IOS sensor requires the SNMP sensor to be established and working against the device. If your Cisco IOS sensor is using a Telnet protocol and does not prompt for a user name, type default in the User name field.
    Cisco Works
    Name
    Name to identify the device in the access list.
    User name
    User name to access the server.
    Password
    Password to access the server.
    Computer System, Computer System (Windows)
    Authentication Type
    The type of authentication for the computer system.
    Name
    Name to identify the device in the access list.
    User name
    User name to access the computer system.
    Password
    Password to access the computer system.
    Computing Center Management System (CCMS)
    Name
    Name to identify the device in the access list.
    User name
    User name to access the SAP CCMS server.
    Client ID
    The client ID of the SAP CCMS server.
    Password
    Password to access the SAP CCMS server.
    High Availability Solutions
    Name
    Name to identify the device in the access list.
    User name
    User name to access the Veritas Cluster server.
    Password
    Password to access the Veritas Cluster server.
    IBM® Tivoli® Monitoring
    Name
    Name to identify the device in the access list.
    User name
    User name to access the Tivoli Enterprise Portal Server.
    Password
    Password to access the Tivoli Enterprise Portal Server.
    LDAP Service
    Name
    Name to identify the device in the access list.
    User name
    User name to access the LDAP server.
    Password
    Password to access the LDAP server.
    Network Element (SNMP)
    Name
    Name to identify the device in the access list.
    Community String
    The community string for the network device.
    Confirm Community String
    The community string for the network device.

    The SNMP Network element must be configured to answer queries from the TADDM server IP address.
    Network Element (SNMPV3)
    Name
    Name to identify the device in the access list.
    User name
    User name to access the device.
    Password
    Password to access the device.
    Private Password
    The password used if data encryption is set for SNMP.
    Authentication Protocol
    The type of authentication protocol used by SNMP.
    SysImager Server
    Name
    Name to identify the device in the access list.
    User name
    User name to access the SysImager server.
    Password
    Password to access the SysImager server.
    System Landscape Directory Server
    Name
    Name to identify the device in the access list.
    User name
    User name to access the System Landscape Directory Server.
    Password
    Password to access the System Landscape Directory Server.
  7. To configure the scope limitations, click the Scope Limitations tab.
    The Scope Limitations page is displayed.
  8. On the Scope Limitations page, complete one of the following steps:
    • To use the access information across all components of the entire discovery scope, click Entire scope.
    • To restrict the application of specific access information to certain systems, click Limit to selected scope or Limit to selected scope groups. Then select the scope set or scope group to which you want to restrict access. The access list entry is only used when discovering the selected scope. When discovering a different scope set or scope group, the access list entry is not used. This method prevents invalid login attempts that can result in the user being locked out of the account.
  9. To save the new access list entry, click OK.