7 Replies Latest reply on Jul 7, 2014 7:38 AM by Bill Robinson

response file for rscd agent silent installation on AIX

Nitin Murkute Jul 2, 2014 3:02 AM

Hi Friends,

We are silently installing RSCD agent on AIX server,

Agent is installing but the exports file entry gets missed matched.

What should be the value of NSH_ROOT_HOST variable if we want to push entry as * rw,user=root

My nsh-install-defaults file content is as follows:

COMPONENT_CHECKED=1

export COMPONENT_CHECKED

IS_KEYSTROKE_LOGS=1

export IS_KEYSTROKE_LOGS

NSH_USER_FROM=BLAdmins:BLAdmin

export NSH_USER_FROM NSH_USER_TO

NSH_USER_TO=root

export NSH_USER_TO

NSH_INSTALL_SKEL=1

export NSH_INSTALL_SKEL

TMP_DIR=/tmp

export TMP_DIR

STARTUP_AIX=3

export STARTUP_AIX

Thanks in Advance.....

Nitin

1. Re: response file for rscd agent silent installation on AIX

Bill Robinson Jul 2, 2014 7:19 AM (in response to Nitin Murkute)

i would run a dos2unix on the nsh-install-defaults file. it looks like you have the windows end of line characters in there. you can also vi it and remove the ^Ms...

for the exports, there now way to specify that syntax in the exports. nor should you - you shouldn't map everyone to root...
Like Show 0 Likes(0)

Actions
2. Re: Re: response file for rscd agent silent installation on AIX

Nitin Murkute Jul 2, 2014 9:03 AM (in response to Bill Robinson)
Hi Bill,

Thanks for your quick response as always.

So, we can not pass it to map the root user for all, like "* rw,user=root" with this variable NSH_ROOT_HOST?

or is there any other way to do so?

Also, even if, when we have not set this variable, and used the above mentioned nsh-install-defaults file content without using NSH_ROOT_HOST,
it only show nobody/nobody as follows;

Please find attachment for the same.

Thanks & Regards,..
Nitin

RSCD.png 17.0 K
Like Show 0 Likes(0)

Actions
3. Re: response file for rscd agent silent installation on AIX

Joe Piotrowski Jul 2, 2014 11:31 AM (in response to Nitin Murkute)

What version of the RSCD Agent are you using?

https://docs.bmc.com/docs/pages/releaseview.action?pageId=207556550
Like Show 0 Likes(0)

Actions
4. Re: response file for rscd agent silent installation on AIX

Joe Piotrowski Jul 2, 2014 11:34 AM (in response to Joe Piotrowski)

You're also exporting NSH_USER_TO twice in your file. Not sure if that's causing any issues. After you do the silent install, what entry is in the users.local file?

NSH_USER_FROM=BLAdmins:BLAdmin
export NSH_USER_FROM NSH_USER_TO

NSH_USER_TO=root
export NSH_USER_TO
Like Show 0 Likes(0)

Actions
5. Re: Re: response file for rscd agent silent installation on AIX

Nitin Murkute Jul 2, 2014 11:50 AM (in response to Joe Piotrowski)

Hi Joe,

My users.local file entry after agent installation is as follows,

BLAdmins:BLAdmin rw,map=root

and that of exports file is * rw

My Agent version is 8.5

What should be my nsh-install-defaults content in order to get proper user mapping with root/root permissions?

Regards,
Nitin
Like Show 0 Likes(0)

Actions
6. Re: response file for rscd agent silent installation on AIX

Joe Piotrowski Jul 2, 2014 1:08 PM (in response to Nitin Murkute)

Doing it this way, initially only the built-in BLAdmin user has rights to that server. Instead of "BLAdmins:BLAdmin" I prefer "BLAdmins:*" which gives anyone using the BLAdmins Role rights to the server. Either way initially is fine.

Afterwards, you are expected to run a ACL Push Job. This takes all of the users and permissions and populates the users file. Then your users will have proper access to your servers.
Like Show 0 Likes(0)

Actions
7. Re: response file for rscd agent silent installation on AIX

Bill Robinson Jul 7, 2014 7:38 AM (in response to Joe Piotrowski)

i'm not sure what you mean by 'proper user mapping w/ root/root permissions'.

the NSH_ROOT_HOST should result in an entry like:

* rw,root=xxx

in the exports file.

what is the issue w/ the BLAdmins entry in the users.local ? normally the acls setup during the agent install are just enough so you can run an acl push job. and we definitely not not recommend putting the '* rw,user=root' in the exports file because that means anyone w/ a nsh client and access to the target can be root.

what are you trying to accomplish by setting up the acls like this ?
Like Show 0 Likes(0)

Actions