MID Server Service Account

ollop
Tera Contributor

Hi Gents

I hope the best for you!

 

I write here because I'm involved on a credentials issue and I'm trying to exit asap.

I started my work on a new customer and the actual support team of the platform told to me that they didn't have any KT (Knowledge Transfer) about ITOM configurations.

This means that nobody knows any important thing as, for example, the MID Server Service Account (the installation user of the discovery feature).

I wanted to know it because the HI Support asked me to run a command as the same profile of the TOP/DOWN discovery on a remote machine: I don't have any other idea that to start a RDP connection as that profile and, when I login, to run the command. Any other idea to achieve this?

To continue with my idea, I found out the two configurations on credentials we have for windows cases.

One it's related to a specific account (but the system engineers told me this account can't perform any RDP connection), and another has the tick "use MID Server Service Account".

This credential seems to work fine when I apply to a machine fully discovered: to verify it, I use "Test credentials" on the detailed record of credential table. 

Therefore I continue to better determine the user/pwd I have to use (the same value used by "Test credentials" on the record with the tick "use MID Server Service Account".... but:

  1. I found out that in the config.xml file of my mid server is indicated a name and a password (encrypted). 
  2. I found out the Mid Service service on my midserver windows machine runs as a Service Account and this user is different nad the password is hidden.

Here you are my question: which is the correct combination ......the 1 or the 2? Do you have any other proposal about how I can retrieved the user/pass I need? Do you ave any other idea to achieve the goal asked my by the HI Support, or to run a command as the top/down discovery?

 

Thank you in advance for your time reading all this long explanation and also for your help

Any contributions are welcome

Davide Gandolfi

2 ACCEPTED SOLUTIONS

Aneesh-D
Tera Guru
Tera Guru

Dear @ollop - we are talking of three type of credentials here: I have tried to explain all them in below.

 

AneeshD_1-1721743281228.png

 

 

Now, your goal is to run a command on the Remote machine, which sounds like you want to run the command on the CI that you wanted to discover.

 

One of the ways in which you can run a command is: Open any pattern designer, start the debug mode and give the IP address of the remote server you want to run the command on. and then press on the run command button that would give you an option to run the command.

AneeshD_2-1721743854841.png

 

 

 

AneeshD_3-1721743921324.png

 

View solution in original post

Community Alums
Not applicable

HI @ollop , 

 

Aneesh is referring to identification section inside the discovery pattern, you are in the right location. please scroll down, you will be able to see identification section and click on the record, you will be able to see debug mode option when patterns opens.

 

Please refer to below youtube video, it explains about pattern designer 

https://youtu.be/uNji9pQOiBY?si=-epIi6pA5QB0hKK_

 

Regards, 

 

Srinija

 

 

View solution in original post

Here in this Video, I have covered the detailed discussion on Probes, Discovery Classifier, Pattern and Pattern Debugging. Thank you for visiting my channel. Here, I'll share various technical knowledge. Feel free to reach out to me directly for any Service Now-related queries. Your support ...
6 REPLIES 6

Aneesh-D
Tera Guru
Tera Guru

Dear @olle,

 

please try this: "c:/Windows/System32/inetsrv/appcmd.exe SITE list"

for details read through this post: discovery-pattern-debug-mode-command-prompt-space-in-the-name-of/m-p/2994336#M117468 

 

I don't have any virtual services running so list don't work for me. Bellow is the help command for SITE.

 

AneeshD_1-1722261877920.png

 

 

 

ollop
Tera Contributor

Thank you @Aneesh-D 

I try as I can

I already marked this post as solution: so I think there's no necessity to do again.

Thank you for your adding

Cheers

Davide Gandolfi