Hi Stefan,

Thank you for sharing the update on this. 

The updated packages will be part of the next OMSA release in April tentatively 
on publicly available OMSA repo.

Thanks and Regards,
Puneet Sapra - Dell EMC

-----Original Message-----
From: Dietrich, Stefan <[email protected]> 
Sent: Wednesday, February 6, 2019 12:45 PM
To: linux-poweredge-Lists
Cc: Sapra, Puneet
Subject: Re: OMSA 9.2.0 breaking non-privileged user access?


[EXTERNAL EMAIL] 

Hello Puneet,

I can confirm, the updated packages solve the problems and running "omreport 
chassis memory" etc. is possible again for non-privileged users.
I hope the updated packages will be part of the February release on 
http://linux.dell.com/repo/hardware/dsu/

Regards,
Stefan

----- Original Message -----
> From: "Puneet Sapra" <[email protected]>
> To: [email protected]
> Cc: "Stefan Dietrich" <[email protected]>
> Sent: Tuesday, February 5, 2019 7:07:06 PM
> Subject: RE: OMSA 9.2.0 breaking non-privileged user access?

> Hi Stefan,
> 
> OMSA 9.2.0 CLI commands failure issue with non-root/non-admin user 
> access for some omreport commands, has been addressed in the below 
> patch. Kindly use the patch to resolve the issue and let us know if you see 
> any further issues.
> 
> Dell EMC OpenManage Server Administrator Managed Node (Patch) for RHEL 
> 6.10,
> v9.2.0.3
> https://www.dell.com/support/home/in/en/inbsd1/Drivers/DriversDetails?
> driverid=PRMR9
> 
> Dell EMC OpenManage Server Administrator Managed Node (Patch) for RHEL 
> 7.5,
> v9.2.0.3
> https://www.dell.com/support/home/in/en/inbsd1/Drivers/DriversDetails?
> driverid=K7GGP
> 
> Dell EMC OpenManage Server Administrator Managed Node (Patch) for SLES 
> 15,
> v9.2.0.3
> https://www.dell.com/support/home/in/en/inbsd1/Drivers/DriversDetails?
> driverid=WDDHN
> 
> Dell EMC OpenManage Server Administrator Managed Node for Ubuntu 
> 18.04.1, v9.2.0 https://linux.dell.com/repo/community/openmanage/
> 
> Thanks and Regards,
> Puneet Sapra - Dell EMC
> 
> -----Original Message-----
> From: Sapra, Puneet
> Sent: Monday, January 28, 2019 5:38 PM
> To: linux-poweredge-Lists
> Cc: '[email protected]'
> Subject: OMSA 9.2.0 breaking non-privileged user access?
> 
> Dell - Internal Use - Confidential
> 
> 
> Hi Stefan,
> 
> Thank you for reaching out to us.
> 
> We are aware of this reported issue and in the process of releasing a 
> patch for the same. We shall keep you updated on the forum as soon as 
> we are ready with a patch.
> 
> Currently there is no better workaround than elevating the normal user 
> to an admin (updating omarolemap).
> 
> Thanks and Regards,
> Puneet Sapra
> 
> Today's Topics:
> 
>   1.  OMSA 9.2.0 breaking non-privileged user access?
>      (Dietrich, Stefan)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Fri, 25 Jan 2019 16:04:04 +0100 (CET)
> From: "Dietrich, Stefan" <[email protected]>
> To: linux-poweredge <[email protected]>
> Subject: [Linux-PowerEdge] OMSA 9.2.0 breaking non-privileged user
>       access?
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="utf-8"
> 
> 
> [EXTERNAL EMAIL]
> 
> Hi,
> 
> OMSA 9.2.0 seems to break non-privileged user access for some commands.
> For example, running omreport chassis memory as normal user now only 
> returns an
> error:
> 
> -bash-4.2$ id
> uid=994(nrpe) gid=992(nrpe) groups=992(nrpe),993(nagios) -bash-4.2$ 
> omreport chassis memory Memory Information Error : SMStatus: 700
> 
> -bash-4.2$ omreport chassis batteries
> Error! XML Transformation failed
> 
> ...while "omreport chassis memory" does not work, "omreport chassis 
> fans" does work.
> So far, the subcommands "chassis memory", "chassis pwrmonitoring" & 
> "chassis batteries" seem to be affected.
> Issue has been seen for OMSA 9.2.0 on CentOS 7 and Ubuntu 18.04.
> 
> According to
> https://www.dell.com/community/Systems-Management-General/After-upgrad
> e-from-OMSA-9-1-to-9-2-commands-fail-on-Centos/td-p/6220369
> configuring Administrator privileges in 
> /opt/dell/srvadmin/etc/omarolemap "solves" the issue.
> However, Administrator contains lots of privileges.
> 
> This essentially breaks hardware monitoring with check_openmanage via NRPE.
> 
> Is there a better workaround available than assigning Administrator 
> privileges or running some commands with sudo via NRPE?
> 
> Regards,
> Stefan
> 
> srvadmin package versions:
> # rpm -qa srvadmin\* | sort
> srvadmin-base-9.2.0-3142.13664.el7.x86_64
> srvadmin-cm-9.2.0-18.10.00.x86_64
> srvadmin-deng-9.2.0-3142.13664.el7.x86_64
> srvadmin-hapi-9.2.0-3142.13664.el7.x86_64
> srvadmin-isvc-9.2.0-3142.13664.el7.x86_64
> srvadmin-marvellib-9.2.0-3142.13664.el7.x86_64
> srvadmin-nvme-9.2.0-3142.13664.el7.x86_64
> srvadmin-omacore-9.2.0-3142.13664.el7.x86_64
> srvadmin-omacs-9.2.0-3142.13664.el7.x86_64
> srvadmin-omcommon-9.2.0-3142.13664.el7.x86_64
> srvadmin-omilcore-9.2.0-3142.13664.el7.x86_64
> srvadmin-ominst-9.2.0-3142.13664.el7.x86_64
> srvadmin-realssd-9.2.0-3142.13664.el7.x86_64
> srvadmin-server-cli-9.2.0-3142.13664.el7.x86_64
> srvadmin-smcommon-9.2.0-3142.13664.el7.x86_64
> srvadmin-storage-9.2.0-3142.13664.el7.x86_64
> srvadmin-storage-cli-9.2.0-3142.13664.el7.x86_64
> srvadmin-storageservices-cli-9.2.0-3142.13664.el7.x86_64
> srvadmin-storelib-9.2.0-3142.13664.el7.x86_64
> srvadmin-storelib-sysfs-9.2.0-3142.13664.el7.x86_64
> srvadmin-sysfsutils-9.2.0-3142.13664.el7.x86_64
> srvadmin-xmlsup-9.2.0-3142.13664.el7.x86_64
> 
> --
> ------------------------------------------------------------------------
> Stefan Dietrich            Deutsches Elektronen-Synchrotron (IT-Systems)
>                        Ein Forschungszentrum der Helmholtz-Gemeinschaft
>                                                            Notkestr. 85
> phone:  +49-40-8998-4696                                   22607 Hamburg
> e-mail: [email protected]                                  Germany
> ----------------------------------------------------------------------
> --
> 
> 
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> Linux-PowerEdge mailing list
> [email protected]
> https://lists.us.dell.com/mailman/listinfo/linux-poweredge
> 
> ------------------------------
> 
> End of Linux-PowerEdge Digest, Vol 175, Issue 2
> ***********************************************
_______________________________________________
Linux-PowerEdge mailing list
[email protected]
https://lists.us.dell.com/mailman/listinfo/linux-poweredge

Reply via email to