can't start nimbus service with systemd
search cancel

can't start nimbus service with systemd

book

Article ID: 224013

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

After installing UIM 20.3.3 in Redhat 8 with Oracle DB, when I restart the primary hub or OC the service nimbus doesn't start automatically.

Manually executing "systemctl start nimbus" doesn't work either.

Executing: systemctl status nimbus

return next

● nimbus.service - LSB: NimBUS Robot
   Loaded: loaded (/etc/rc.d/init.d/nimbus; generated)
   Active: active (exited) since Sun 2021-09-12 16:31:37 -05; 16h ago
     Docs: man:systemd-sysv-generator(8)
  Process: 1458 ExecStart=/etc/rc.d/init.d/nimbus start (code=exited, status=0/SUCCESS)
    Tasks: 0 (limit: 126740)
   Memory: 0B
   CGroup: /system.slice/nimbus.service

Sep 12 16:31:37 <server name> systemd[1]: Starting LSB: NimBUS Robot...
Sep 12 16:31:37 <server name> nimbus[1458]: Starting NimBUS:
Sep 12 16:31:37 <server name> nimbus[1458]: /etc/rc.d/init.d/nimbus: line 45: ./nimbus: Permission denied
Sep 12 16:31:37 <server name> systemd[1]: Started LSB: NimBUS Robot.

Environment

Release : DX UIM 20.4*/23.4*

Component : UIM - ROBOT

Cause

The line 45 of /etc/rc.d/init.d/nimbus contains next:

./nimbus /opt/nimsoft

so the permissions denied problem occurs when executing the line that start the service.

The reason behind this error is that SELINUX is enabled.
After installation, CA UIM cannot function correctly in SELinux Enforcing mode until you add the CA UIM shared libraries to the safe list, or disable the SELinux

Resolution

Security-Enhanced Linux (SELinux) is a Linux feature that supports access control security policies.
While shutting down SELinux before installing UIM Server is not always necessary, doing so maximizes your chance for a successful installation.
If SELinux status is enabled, a Current mode of permissive is acceptable.
Disabling SELinux entirely is an even safer approach.

If you must run UIM Server in SELinux Enforcing mode, add the CA UIM shared libraries to a safe list. After you install CA UIM, execute:

chcon -f -t textrel_shlib_t /<UIM_install>/hub/libldapssl.so.0
chcon -f -t textrel_shlib_t /<UIM_install>/hub/libldapsdk.so.0
chcon -f -t textrel_shlib_t /<UIM_install>/hub/libldapx.so.0

<UIM_install> is the directory where CA UIM is installed.

Additional Information

This is described in product documentation:

Configure your Operating System