MID Server Service Account

[ollop]

Hi Gents

I hope the best for you!

I write here because I'm involved on a credentials issue and I'm trying to exit asap.

I started my work on a new customer and the actual support team of the platform told to me that they didn't have any KT (Knowledge Transfer) about ITOM configurations.

This means that nobody knows any important thing as, for example, the MID Server Service Account (the installation user of the discovery feature).

I wanted to know it because the HI Support asked me to run a command as the same profile of the TOP/DOWN discovery on a remote machine: I don't have any other idea that to start a RDP connection as that profile and, when I login, to run the command. Any other idea to achieve this?

To continue with my idea, I found out the two configurations on credentials we have for windows cases.

One it's related to a specific account (but the system engineers told me this account can't perform any RDP connection), and another has the tick "use MID Server Service Account".

This credential seems to work fine when I apply to a machine fully discovered: to verify it, I use "Test credentials" on the detailed record of credential table. 

Therefore I continue to better determine the user/pwd I have to use (the same value used by "Test credentials" on the record with the tick "use MID Server Service Account".... but:

1. I found out that in the config.xml file of my mid server is indicated a name and a password (encrypted). 
2. I found out the Mid Service service on my midserver windows machine runs as a Service Account and this user is different nad the password is hidden.

Here you are my question: which is the correct combination ......the 1 or the 2? Do you have any other proposal about how I can retrieved the user/pass I need? Do you ave any other idea to achieve the goal asked my by the HI Support, or to run a command as the top/down discovery?

Thank you in advance for your time reading all this long explanation and also for your help

Any contributions are welcome

Davide Gandolfi

[Aneesh-D · Accepted solution]

Dear @ollop - we are talking of three type of credentials here: I have tried to explain all them in below.

Now, your goal is to run a command on the Remote machine, which sounds like you want to run the command on the CI that you wanted to discover.

One of the ways in which you can run a command is: Open any pattern designer, start the debug mode and give the IP address of the remote server you want to run the command on. and then press on the run command button that would give you an option to run the command.

[Aneesh-D · Accepted solution]

Dear @ollop - we are talking of three type of credentials here: I have tried to explain all them in below.

Now, your goal is to run a command on the Remote machine, which sounds like you want to run the command on the CI that you wanted to discover.

One of the ways in which you can run a command is: Open any pattern designer, start the debug mode and give the IP address of the remote server you want to run the command on. and then press on the run command button that would give you an option to run the command.

[ollop]

Hi @Aneesh-D 

The explanation about credentials is clear. Thank you

I'm not so sure to understand the steps I have to follow in order to run my command.

When you say "Open any pattern designer" are you telling about the back end of the ServiceNow platform, section "Discovery Patterns" (....now/nav/ui/classic/params/target/sn_discovery_patterns_list.do)?

If I open one of the records there, I find "Check pattern" button not "Debug": is it what are you indicating?

Thank you again

Davide Gandolfi

[Community Alums · Accepted solution]

HI @ollop , 

Aneesh is referring to identification section inside the discovery pattern, you are in the right location. please scroll down, you will be able to see identification section and click on the record, you will be able to see debug mode option when patterns opens.

Please refer to below youtube video, it explains about pattern designer 

https://youtu.be/uNji9pQOiBY?si=-epIi6pA5QB0hKK_

Regards, 

Srinija

[ollop]

Hi @Community Alums , @Aneesh-D 

In order to exploit the "Command" line you indicated, do I have to use a particular sintax?

I mean: I tried with C:\windows\system32\inetsrv\appcmd.exe list SITE and also adding " --> "C:\windows\system32\inetsrv\appcmd.exe list SITE" but nothing.

In order to understand I tried also with the command above dir + ...

I obtain always:

Is there a document explaining this part of the platform?

Thank you in advance for any reply

Davide Gandolfi