How to fix non-root user account if Server/Cluster Management Guide configuration still prompts for password

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to fix non-root user account if Server/Cluster Management Guide configuration still prompts for password after the SUDOER file is setup and the non-root user has SSH access enabled.

Environment

• EDR Cluster: All Supported Versions
• Linux OS: Supported Versions

Resolution

1. Use the EDR Server/Cluster Management Guide to set the SUDOER file permissions on ALL cluster nodes (primary and minions)
2. Validate non-root user has SSH access to all nodes of the cluster
3. Change user in /etc/cb/cluster.conf for each of the minion nodes to the non-root user account
4. Backup existing /etc/cb/cb_ssh and /etc/cb/cb_ssh.pub as /etc/cb/bak_cb_ssh and /etc/cb/bak_cb_ssh.pub
5. Remove cb_ssh and cb_ssh.pub files
6. Run '/usr/share/cb/cbcluster status' cmd (this is expected to request for password for first use, so enter the password for ssh enabled non-root user)
7. Run '/usr/share/cb/cbcluster status' cmd again, and it should *not* prompt for password anymore