DX NetOps Spectrum upgrade using silent method not working with sudoers
Article ID: 237020
Updated On:
Products
Issue/Introduction
DX NetOps Spectrum upgrade is failing using silent mode.
Below step is giving error
./sdiclinux -h hostfile.txt -p password.txt -test
Error
spectrumserver: Creating installation log: LOGS_20220316/spectrumserver.03.38
spectrumserver: Starting Test
spectrumserver: SPC-INT-20074: Insufficient privileges on spectrumserver.
spectrumserver:
spectrumserver: Spectrum Installation requires either ROOT access, SUDO privileges or Administrator privileges. Please see the Spectrum Installation Guide (Document number 5136) for more information regarding SUDO.
spectrumserver: Test complete
All tests complete
Environment
Release : Any version
Component : SPECTRUM INSTALLATION
Cause
Permissions issue with Sudoers
spectrum spectrumserver = (root) NOPASSWD:/opt/spectrum/CA/SRAdmin/sradmin.exe
Resolution
Check sudoers file and ensure that root is not given at below line.
spectrum spectrumserver = (root) NOPASSWD:/opt/spectrum/CA/SRAdmin/sradmin.exe
If it is given then ensure the line reflect as below
spectrum spectrumserver = /opt/spectrum/CA/SRAdmin/sradmin.exe (<--- correct way)
Ensure the symbolic link to the sudoers file in the /sw/SPECTRUM/SRAdmin/ directory was created:
Here is an example:
$ cd /sw/SPECTRUM/SRAdmin
$ sudo ln -s /etc/sudoers.d/sradmin-sd sudoers
$ sudo ls -lar /sw/SPECTRUM/SRAdmin
lrwxrwxrwx. 1 root root 25 Aug 6 21:54 sudoers -> /etc/sudoers.d/sradmin-sd
Also, ensure the file permission is set to 440 (Read-Only) and NOT 640 (Read-Write)
Here is an example:
$ sudo ls -lar /etc/sudoers.d/sradmin-sd
-r--r-----. 1 root root 1801 Aug 19 16:47 /etc/sudoers.d/sradmin-sd
Always use the visudo utility to edit a sudoers file.
Additional Information
For silent install below are the steps
1. sudoes file contents of below entries
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl start sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl stop sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl enable sradmin.service
spectrum ALL=(ALL) NOPASSWD: /usr/bin/systemctl status sradmin.service
spectrum spectrumserver = /opt/spectrum/CA/SRAdmin/sradmin.exe
2. symbolic link to the sradmin folder:(/opt/spectrum/CA/SRAdmin)
3. Give user permissions to the install folder:
chown -R spectrum:spectrum /opt/spectrum/CA/spectrum
4. Host file contents
remote_host=spectrumserver
install_owner=spectrum
main_loc_serv=spectrumserver
tomcat_port=8080
l_handle=0x100000
huge_landscape_handle=no
ss_install=yes
oc_install=yes
xtn_install=yes
exclude_parts=
install_type=full
locale=en_US
install_dir=/opt/spectrum/CA/spectrum
vcd_path=/opt/sw/sdic
product_name=CA Spectrum
remove_vnmdb_lock=yes
5.Password file contents
spectrumserver spectrum spectrum
Now run the install using below commands.
su spectrum
sudo ./sdiclinux.exe -h host.txt -p pass.txt -test
Once test succeeds then
sudo ./sdiclinux.exe -h host.txt -p pass.txt -accept
Document Link:
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/23-3/installing-and-upgrading/fresh-install/install-ca-spectrum-with-non-root-user.html
Feedback
