RE: [TME 10] AIX Premium Agent - Non-root Install

I am a firm believer that non-root installs on agents should be avoided
like the plague.  It might look good on somebody's spreadsheet that they
have moved everybody off root.  But in reality a lot of system metrics
either require root privilege to interrogate them, or in some extreme
cases, actually search for logname as root.
 
By all means lock down root, but use something like sudo to allow you to
stop/start the agent as root

________________________________

From: [email protected]
[mailto:[email protected]] On Behalf Of K Nickelson
Sent: 19 December 2012 21:58
To: [email protected]; [email protected]
Subject: RE: [TME10] [TME 10] AIX Premium Agent - Non-root Install


Were you guys aware that the functionality of the AIX premium Agent is
being merged into the UX agent? Heard this at a user group this year.
Some of the functionality was merged as of ITM 6.2.3 FP1 and I believe
they indicated that the plan is to merge the all of the functionality in
2013. The premium agent will still work; but will gradually be
deprecaited and new functionality will be added in the UX. Sounds like
that is the plan for the UL (ITM log Agent replaces) and the UM (Agent
Builder) - don't recall the timeframes on those, however.




 
 

 



________________________________

Date: Fri, 28 Oct 2011 16:12:07 -0400
Subject: Re: [TME10] [TME 10] AIX Premium Agent - Non-root Install
From: [email protected]
To: [email protected]
CC: [email protected]


No, we did not give the userid any special priviledges, but now that I
am thinking more about it, I think we may have had problems running the
px agent as a non-root user on AIX 5.3.  On AIX 6.1, it appears to work
as expected. 

Loren Cain

On Fri, Oct 28, 2011 at 3:38 PM, Manish A. Parikh
<[email protected]> wrote:


	Loren,

	 

	Did you have to give that userid specific sudo privileges or
anything? What about commands it executes and libraries it accesses to
do its job?

	 

	Thank you,

	 

	V/r,

	 

	Manish A. Parikh

	 

	From: Loren Cain [mailto:[email protected]] 
	

	Sent: Friday, October 28, 2011 3:21 PM
	To: [email protected]; Discussion list for Tivoli product
and Tivoli Ready products.
	Subject: Re: [TME10] [TME 10] AIX Premium Agent - Non-root
Install


	 

	I have been running the 6.2.2 px agents as a non-root user for
about a year and a half with no apparent problems. I think I recall
reading somewhere, in a README file or technote maybe, that the root
requirement was no longer necessary.

	 

	Loren Cain

	On Fri, Oct 28, 2011 at 2:15 PM, Manish A. Parikh
<[email protected]> wrote:

	I know IBM documentation says:

	 

	"The agent is expected to be installed, configured, and started
under the root user ID."

	 

	
http://publib.boulder.ibm.com/infocenter/tivihelp/v15r1/index.jsp?topic=
%2Fcom.ibm.itm.doc_6.2.2%2Fpaix62116.htm&path=3_3_3_6_0_3_2
<http://publib.boulder.ibm.com/infocenter/tivihelp/v15r1/index.jsp?topic
=/com.ibm.itm.doc_6.2.2/paix62116.htm&path=3_3_3_6_0_3_2> 

	 

	Has anyone tried a non-root install? Is it even possible? I
don't always believe everything 'BigBlue' says J

	 

	Thanks in advance for feedback

	 

	Thank you,

	 

	V/r,

	 

	Manish A. Parikh

	ESM Consultant

	ROMA IT, LLC 

	 

	
	_______________________________________________
	TME10 mailing list
	[email protected]
	Unsubscribe:[email protected]
<mailto:Unsubscribe%[email protected]> 

	 




_______________________________________________ TME10 mailing list
[email protected] Unsubscribe:[email protected]
Lloyds TSB Bank plc. Registered Office: 25 Gresham Street, London EC2V 7HN. Registered in England and Wales, number 2065. Telephone: 020 7626 1500.

Bank of Scotland plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland, number 327000.  Telephone: 020 7626 1500.

Lloyds TSB Scotland plc. Registered Office: Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237. Telephone: 0131 225 4555.

Cheltenham & Gloucester plc. Registered Office: Barnett Way, Gloucester GL4 3RL. Registered in England and Wales, number 2299428. Telephone: 01452 372372.

Lloyds TSB Bank plc, Lloyds TSB Scotland plc, Bank of Scotland plc and Cheltenham & Gloucester plc are authorised and regulated by the Financial Services Authority.

Halifax is a division of Bank of Scotland plc. Cheltenham & Gloucester Savings is a division of Lloyds TSB Bank plc.

HBOS plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland, number 218813.  Telephone: 020 7626 1500.

Lloyds Banking Group plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland, number 95000. Telephone: 0131 225 4555

This e-mail (including any attachments) is private and confidential and may contain privileged material. If you have received this e-mail in error, please notify the sender and delete it  (including any attachments) immediately. You must not copy, distribute, disclose or use any of the information in it or any attachments.

Telephone calls may be monitored or recorded.

_______________________________________________
TME10 mailing list
[email protected]
Unsubscribe:[email protected]