Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

CSCup31962 Commands showing on the bug workaround are wrong

The CLI commands from the bugid are wrong. You can run the below commands (just in case you do not have them yet):

 

  1. run sql select * from cuic_data:cuicuser

 

This command is to see all the users that should have access on CUIC. The output is like this: (copy & paste the below output in Notepad++ to see it better)

 

admin:run sql select * from cuic_data:cuicuser

id                               version name                    description                                                          partition defaultgroupid                   sharingpermissi                                on alias firstname lastname organization emailaddress contactphone cuicroles tim                                ezoneid isactive startoftheweek

================================ ======= ======================= ===============                                ===================== ========= ================================ ===============                                == ===== ========= ======== ============ ============ ============ ========= ===                                ======= ======== ==============

1111111111111111111111111111AAAA 2935    CUIC\uccxadmin          This is system'                                s super administrator Default   2222222222222222222222222222BBBB 3                                                       Super     Admin                                           127                                                  t        0

1928507C10000148000000BE0A73965A 1266    CCX\stephanie.rondas                                                                         Default   2222222222222222222222222222AAAA 0                                                                                                                 84                                                   t        0

34C015451000014234407C860A73965A 2947    CCX\todd.gasperin                                                                            Default   2222222222222222222222222222AAAA 0                                                                                                                 124                                                  t        0

34C0154D10000142638939640A73965A 2944    CCX\blake.johnson                                                                            Default   2222222222222222222222222222AAAA 0                                                                                                                 124                                                  t        0

34C01526100001422A77013F0A73965A 2936    CCX\ericv                                                                                    Default   2222222222222222222222222222AAAA 0                                                                                                                 124                                                  t        0

48790048100001422F8FC9B00A74965A 2941    CCX\danl                                                                                     Default   2222222222222222222222222222AAAA 0                                                                                                                 124                                                  t        0

 

As you can see, under the name column, some users are showing ccx\<userid> instead of CUIC\<userid>. This generates a problem. That is what we are going to change on the below commands. From this table we will use the CCX\<userid> and the id column to replace it on the below commands.

 

  1. run sql select * from mmca_propertydef where propertyname='OAMP.Superuser'

This command is to check which is the superuser. So, you do not want to touch this user account

  1. run sql update cuic_data:cuicuser set name='CUIC\xxxx' where id='yyyyyyyyyyyyyyyy'

With this command you replace xxx with the user that you want to make part of CUIC user database. Replace yyyyyyyyyyyyy with the id of the same user from the output of step 1.

  1. utils service restart Cisco Unified Intelligence Center Reporting Service
  2. utils service restart Cisco Unified Intelligence Center Serviceability Service
  3. utils uccx synctocuic all
  4. run sql update cuic_data:cuicuser set cuicroles=127 where name='CUIC\xxxx'

So, if you run the command in step 1 again, the user will now show as CUIC\xxxx instead of CCX\xxxx. So, now you are able to change the role with the above command.

The command is to give admin rights to the user

  1. utils service restart Cisco Unified Intelligence Center Reporting Service
  2. utils service restart Cisco Unified Intelligence Center Serviceability Service
  3. utils uccx synctocuic all

 

You can run the first command again to make sure your user shows CUIC\<userid> and not CCX\<userid> and the privilege shows 127. I hope that helps.

4 REPLIES
Community Member

Thanks.  This worked for me.

Thanks.  This worked for me.  I also set the defaultgroupid to 2222222222222222222222222222BBBB for both the CCX/uccxadmin and CUIC/uccxadmin accounts. I am unsure if that's necessary, but I ran it at the same time as setting the privilege to 127.

run sql update cuic_data:cuicuser set defaultgroupid='2222222222222222222222222222BBBB' where name='CUIC\uccxadmin' 

it looks like the CCX/uccxadmin acount gets created after logging in to the CUIC GUI.  Also, note, during troubleshooting, I accidentally removed the account with id=1111111111111111111111111111AAAA.  This can be changed by: run sql update cuic_data cuicuser set id=111....'AAAA' where name='CUIC\uccxadmin'

Finally, I'm running  version 9.0 and the utils synctocuic command is unavailable.  Still seemed to work though (fingers x'd)

Thanks again for posting this

Community Member

HiI didn't work for me.Via

Hi

I didn't work for me.

Via Tools>user Management>Report capability view.

problem is, we are not able to add user to "Historical Report Users*"

we get below error.

Error occurred while performing the operation. Please contact your System Administrator. You may refer to Application Administration logs for more details.
 
Also, Tools>Historical Reporting>Database Server Configuration
When I update "Max DB Connections for Report Client Sessions "
I get below error message,
Failed to update Max DB connections in Cisco Unified Intelligence Center
 
Decided to open TAC case,
Thanks.
 
Community Member

Hi schumpit,Thank you for

Hi schumpit,

Thank you for this post, because the Cisco TAC work around did not work.

After running your step by step guide got administration access to the CUIC.

So I was able to log in to CUIC with my "AppAdmin".

But I have to keep an eye on the login "authenticator" (see screenhot), because the "AppAdmin" is only CUIC Admin in the CUIC "Domain".

 

Regards
Rieda

Community Member

Hello,Hitting the same bug.

Hello,

Hitting the same bug. Did you have to make the change to ALL users requiring access to live gadgets via Finesse?

Tested it with one admin user, but when I did a resync I had two entries for that user i.e.

CUIC\username and CCX\username, this doesn't seem right to me?

Thanks

1712
Views
0
Helpful
4
Replies
CreatePlease to create content