How to give non-root users permission to start and stop NSM r11 services using CA Common Services utilities (unicntrl, unistart, unishutdown, and unicycle)
Article ID: 51625
Updated On:
Products
Issue/Introduction
Description
After installing any NSM r11 services, only the root user can start, stop, or recycle the installed services using the CA Common Services utilities. The solution describes how to grant other, non-root users, permission to use these utilities as well.
Solution:
The NSM r11 installation gives access to the following commands to the root user only:
unicntrl start/stop <service name or all>
unistart <service name or all>
unishutdown <sevice name or all>
unicycle <service name or all>
If you want to grant this access to non-root users, register these users with the following command:
unisrvcntr useradd --name=<username> <service name or all>
where <service name> is any of the installed CA services (CA-atech, CA-diadna, etc.) or all.
If you do not register non-root users specifying "all" for the service name, then those users cannot execute commands such as: uncntrl start all or unicntrl stop all.
These users will only be allowed to control the <service name> specified in the "unisrvcntr useradd" commands executed. To remove this access for non-root users who have been registered to use these utilities, run the following command:
unisrvcntr userdel --name=<username> <service name or all>
If no argument is provided for <service name or all>, then access to every service name the user was registered for will be removed. These commands will display the command usage:
unisrvcntr useradd [-h | -?]
unisrvcntr userdel [-h | -?]
These commands will also display a list of currently installed CA service names that can be used with these commands.
Environment
Component:
Feedback
