[EXTERNAL EMAIL] 

Hi,

OMSA 9.2.0 seems to break non-privileged user access for some commands.
For example, running omreport chassis memory as normal user now only returns an 
error:

-bash-4.2$ id
uid=994(nrpe) gid=992(nrpe) groups=992(nrpe),993(nagios)
-bash-4.2$ omreport chassis memory
Memory Information
Error : SMStatus: 700

-bash-4.2$ omreport chassis batteries
Error! XML Transformation failed

...while "omreport chassis memory" does not work, "omreport chassis fans" does 
work.
So far, the subcommands "chassis memory", "chassis pwrmonitoring" & "chassis 
batteries" seem to be affected.
Issue has been seen for OMSA 9.2.0 on CentOS 7 and Ubuntu 18.04.

According to 
https://www.dell.com/community/Systems-Management-General/After-upgrade-from-OMSA-9-1-to-9-2-commands-fail-on-Centos/td-p/6220369
configuring Administrator privileges in /opt/dell/srvadmin/etc/omarolemap 
"solves" the issue.
However, Administrator contains lots of privileges.

This essentially breaks hardware monitoring with check_openmanage via NRPE.

Is there a better workaround available than assigning Administrator privileges 
or running some commands with sudo via NRPE?

Regards,
Stefan

srvadmin package versions:
# rpm -qa srvadmin\* | sort
srvadmin-base-9.2.0-3142.13664.el7.x86_64
srvadmin-cm-9.2.0-18.10.00.x86_64
srvadmin-deng-9.2.0-3142.13664.el7.x86_64
srvadmin-hapi-9.2.0-3142.13664.el7.x86_64
srvadmin-isvc-9.2.0-3142.13664.el7.x86_64
srvadmin-marvellib-9.2.0-3142.13664.el7.x86_64
srvadmin-nvme-9.2.0-3142.13664.el7.x86_64
srvadmin-omacore-9.2.0-3142.13664.el7.x86_64
srvadmin-omacs-9.2.0-3142.13664.el7.x86_64
srvadmin-omcommon-9.2.0-3142.13664.el7.x86_64
srvadmin-omilcore-9.2.0-3142.13664.el7.x86_64
srvadmin-ominst-9.2.0-3142.13664.el7.x86_64
srvadmin-realssd-9.2.0-3142.13664.el7.x86_64
srvadmin-server-cli-9.2.0-3142.13664.el7.x86_64
srvadmin-smcommon-9.2.0-3142.13664.el7.x86_64
srvadmin-storage-9.2.0-3142.13664.el7.x86_64
srvadmin-storage-cli-9.2.0-3142.13664.el7.x86_64
srvadmin-storageservices-cli-9.2.0-3142.13664.el7.x86_64
srvadmin-storelib-9.2.0-3142.13664.el7.x86_64
srvadmin-storelib-sysfs-9.2.0-3142.13664.el7.x86_64
srvadmin-sysfsutils-9.2.0-3142.13664.el7.x86_64
srvadmin-xmlsup-9.2.0-3142.13664.el7.x86_64

--
------------------------------------------------------------------------
Stefan Dietrich            Deutsches Elektronen-Synchrotron (IT-Systems)
                        Ein Forschungszentrum der Helmholtz-Gemeinschaft
                                                            Notkestr. 85
phone:  +49-40-8998-4696                                   22607 Hamburg
e-mail: [email protected]                                  Germany
------------------------------------------------------------------------

_______________________________________________
Linux-PowerEdge mailing list
[email protected]
https://lists.us.dell.com/mailman/listinfo/linux-poweredge

Reply via email to