Start a new topic
Answered

Sudo permissions for eG Agent

What are the default Sudo permissions set for eG agent?


Best Answer

We add the following entries in etc/sudoers.


If the /usr/sbin/vgdisplay folder exists, we will add this entry in sudoers file.


eguser ALL=NOPASSWD:/usr/sbin/vgdisplay


if /usr/bin/esxtop folder exist we will add these entries


eguser ALL=NOPASSWD:/usr/bin/esxtop


eguser ALL=NOPASSWD:/opt/egurkha/lib/vmgfiles/getinfo.pl


eguser ALL=NOPASSWD:/opt/egurkha/lib/vmgfiles/getinfo.sh


eguser ALL=NOPASSWD:/usr/sbin/vdf


Vgdisplay is used to determine the physical and virtual volumes and their sizes. Performance/Configuration tests will use this command.


Getinfo.sh / getinfo.pl / vdf are used (LINUX ONLY) for monitoring old VMware model.


If the eG agent is used as a remote agent (LINUX) for monitoring old VMWare model, then the above commands require execution privilege explicitly, in case of absence of sudoers entry.


If the Sudoers file is removed, then the above commands like “vgdisplay” won't work. The same holds for other commands mentioned above.


1 Comment

Answer

We add the following entries in etc/sudoers.


If the /usr/sbin/vgdisplay folder exists, we will add this entry in sudoers file.


eguser ALL=NOPASSWD:/usr/sbin/vgdisplay


if /usr/bin/esxtop folder exist we will add these entries


eguser ALL=NOPASSWD:/usr/bin/esxtop


eguser ALL=NOPASSWD:/opt/egurkha/lib/vmgfiles/getinfo.pl


eguser ALL=NOPASSWD:/opt/egurkha/lib/vmgfiles/getinfo.sh


eguser ALL=NOPASSWD:/usr/sbin/vdf


Vgdisplay is used to determine the physical and virtual volumes and their sizes. Performance/Configuration tests will use this command.


Getinfo.sh / getinfo.pl / vdf are used (LINUX ONLY) for monitoring old VMware model.


If the eG agent is used as a remote agent (LINUX) for monitoring old VMWare model, then the above commands require execution privilege explicitly, in case of absence of sudoers entry.


If the Sudoers file is removed, then the above commands like “vgdisplay” won't work. The same holds for other commands mentioned above.


Login to post a comment