Unable to start Spectrum Application, unable to set CAP_SETFCAP effective capability: Operation not permitted
search cancel

Unable to start Spectrum Application, unable to set CAP_SETFCAP effective capability: Operation not permitted

book

Article ID: 203200

calendar_today

Updated On:

Products

CA Spectrum CA eHealth

Issue/Introduction

unable to start Spectrum Applicaton

$ ./startSS.pl &
[1]     2702
$ unable to set CAP_SETFCAP effective capability: Operation not permitted
Started: SpectroSERVER Daemon, PID = 2713

Nov 12 04:21:51 : /app/CA/spectrum/SS/SpectroSERVER starting
**************************************************************************

Nov 12 04:21:51 ERROR TRACE at VNM.cc(446): Required capabilities cap_net_raw and cap_net_bind_service are not set properly.
Nov 12 04:21:51 ERROR TRACE at VNM.cc(447): If installed Spectrum as non-root,Please run the $SPECROOT/Install-Tools/CASpectrum_ProcessRegister.sh as root to properly set capabilities if not run earlier
Nov 12 04:21:51 ERROR TRACE at VNM.cc(448): If replaced SpectroSERVER file, then once start SS using startSS.pl with install owner

Environment

Release : 10.4.x/20.x/21.x/22.x

Component : Spectrum Core / SpectroSERVER

Cause

Need to re-register Processd as suggested in VNM.OUT

Resolution

10.x/20.x/21.x:
Switch to root user
# cd $SPECROOT/Install-Tools
./CASpectrum_ProcessRegister.sh 

22.x:
Follow the steps given in below document link
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/22-2/installing-and-upgrading/fresh-install/install-ca-spectrum-with-non-root-user.html

Perform Post-Installation Steps for Spectrum
After you complete the installation, you must perform the required post-installation steps.
Follow these steps:
  • Log in as a 'root' user.
  • Run the following script, which is available in the 
    $SPECROOT/Install-Tools/
     directory:
    spectrum_nonroot_prepost_install.sh
    This script registers the 
    processd
     service assigns the capabilities to SpectroSERVER, and reserves ports for various Spectrum processes. It also registers the Spectrum service, and starts Spectrum as a non-root user.
  • Log in as a 'non-root user and check the service status.
    To check the service status, run the command.
    systemctl --user status processd
    In a DSS or Fault-Tolerant (FT) environment, run the 
    sra_nonroot_prepost_install.sh
     script on all DSS and FT computers after installing 
    DX NetOps Spectrum


    Switch to install user

    cd $SPECROOT/bin

    ./startSS.pl

    Now it will start fine

    NOTE:

    If still problem persists please open a case with Broadcom Support.