DX NetOps Spectrum upgrade using silent method not working with sudoers

Products

• Spectrum
• Network Observability

Issue/Introduction

DX NetOps Spectrum upgrade is failing using silent mode. 

Below step is giving error 

./sdiclinux -h hostfile.txt -p password.txt -test

Error

spectrumserver: Creating installation log: LOGS_20220316/spectrumserver.03.38
spectrumserver: Starting Test
spectrumserver: SPC-INT-20074: Insufficient privileges on spectrumserver.
spectrumserver:
spectrumserver: Spectrum Installation requires either ROOT access, SUDO privileges or Administrator privileges.  Please see the Spectrum Installation Guide (Document number 5136) for more information regarding SUDO.
spectrumserver: Test complete
All tests complete

 

Environment

Release : Any version

Component : SPECTRUM INSTALLATION

Cause

Permissions issue with Sudoers

spectrum spectrumserver = (root) NOPASSWD:/opt/spectrum/CA/SRAdmin/sradmin.exe

 

Resolution

Check sudoers file and ensure that root is not given at below line.

spectrum spectrumserver = (root) NOPASSWD:/opt/spectrum/CA/SRAdmin/sradmin.exe

If it is given then ensure the line reflect as below
spectrum spectrumserver = /opt/spectrum/CA/SRAdmin/sradmin.exe  (<--- correct way)

 

Ensure the symbolic link to the sudoers file in the /sw/SPECTRUM/SRAdmin/ directory was created:

Here is an example:

$ cd /sw/SPECTRUM/SRAdmin

$ sudo ln -s /etc/sudoers.d/sradmin-sd sudoers

$ sudo ls -lar /sw/SPECTRUM/SRAdmin

lrwxrwxrwx.  1 root root       25 Aug  6 21:54 sudoers -> /etc/sudoers.d/sradmin-sd

 

Also, ensure the file permission is set to 440 (Read-Only) and NOT 640 (Read-Write)

Here is an example:

$ sudo ls -lar /etc/sudoers.d/sradmin-sd

-r--r-----. 1 root root 1801 Aug 19 16:47 /etc/sudoers.d/sradmin-sd

 

Always use the visudo utility to edit a sudoers file.

Additional Information

For silent install below are the steps

1. sudoes file contents of below entries

spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl start sradmin.service 
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl stop sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl enable sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl status sradmin.service
spectrum spectrumserver = /opt/spectrum/CA/SRAdmin/sradmin.exe 

2. symbolic link to the sradmin folder:(/opt/spectrum/CA/SRAdmin)

3. Give user permissions to the install folder:
 chown -R spectrum:spectrum /opt/spectrum/CA/spectrum

4. Host file contents

remote_host=spectrumserver
install_owner=spectrum
main_loc_serv=spectrumserver
tomcat_port=8080
l_handle=0x100000
huge_landscape_handle=no
ss_install=yes
oc_install=yes
xtn_install=yes
exclude_parts=
install_type=full
locale=en_US
install_dir=/opt/spectrum/CA/spectrum
vcd_path=/opt/sw/sdic
product_name=CA Spectrum
remove_vnmdb_lock=yes

5.Password file contents
spectrumserver spectrum spectrum

Now run the install using below commands.
su spectrum
sudo ./sdiclinux.exe -h host.txt -p pass.txt -test

Once test succeeds then 

sudo ./sdiclinux.exe -h host.txt -p pass.txt -accept

Document Link:
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/23-3/installing-and-upgrading/fresh-install/install-ca-spectrum-with-non-root-user.html