Unable to start Spectrum Application, unable to set CAP_SETFCAP effective capability: Operation not permitted
Article ID: 203200
Updated On:
Products
Issue/Introduction
The Spectrum SpectroSERVER Application will not start. It hangs and there is no SpectroSERVER process:
$ ./startSS.pl &
[1] 2702
$ unable to set CAP_SETFCAP effective capability: Operation not permitted
Started: SpectroSERVER Daemon, PID = 2713
Nov 12 04:21:51 : /app/CA/spectrum/SS/SpectroSERVER starting
**************************************************************************
Nov 12 04:21:51 ERROR TRACE at VNM.cc(446): Required capabilities cap_net_raw and cap_net_bind_service are not set properly.
Nov 12 04:21:51 ERROR TRACE at VNM.cc(447): If installed Spectrum as non-root,Please run the $SPECROOT/Install-Tools/CASpectrum_ProcessRegister.sh as root to properly set capabilities if not run earlier
Nov 12 04:21:51 ERROR TRACE at VNM.cc(448): If replaced SpectroSERVER file, then once start SS using startSS.pl with install owner
Cause
Need to re-register Processd as suggested in VNM.OUT or set the capabilities of the SpectroSERVER application.
Resolution
Follow the steps provided in the documentation if you installed as Non Root user
Perform Post-Installation Steps for Spectrum
After you complete the installation, you must perform the required post-installation steps.
Follow these steps:
Log in as a 'root' user.
Run the following script, which is available in the $SPECROOT/Install-Tools/ directory:
spectrum_nonroot_prepost_install.sh
This script registers the processd service assigns the capabilities to SpectroSERVER, and reserves ports for various Spectrum processes. It also registers the Spectrum service, and starts Spectrum as a non-root user.
Log in as a 'non-root user and check the service status.
To check the service status, run the command.
systemctl --user status processd
In a DSS or Fault-Tolerant (FT) environment, run the sra_nonroot_prepost_install.sh script on all DSS and FT computers after installing DX NetOps Spectrum.
Starting and stopping the services directly using the command /usr/Spectrum/lib/SDPM/processd --start/stop is not supported.
If you did not install with non-root then you can manually set the capabilities with root/sudo access:
/usr/sbin/setcap cap_net_raw,cap_net_bind_service+ep $SPECROOT/SS/SpectroSERVER
/usr/sbin/setcap cap_setuid+ep $SPECROOT/bin/launchinstdbapp
cp /usr/bin/gdb $SPECROOT/bin/gdb
usr/sbin/setcap cap_sys_ptrace+ep $SPECROOT/bin/gdb
Feedback
