AppSync: Cannot add UNIX client to AppSync Server using SUDO user
Symptoms
The user has to use a SUDO UNIX user and does not allow direct root login.
Cannot add UNIX client to AppSync Server using SUDO user.
AppSync GUI dialog message:
User does not have requisite permissions to run deployment. Configure user in the sudousers file on unix agent or provide the required permissions.
AppSync Server Log
service.xio.XIOServiceBean.discoverXMS(com.emc.archway.context.ExecutionContext,com.emc.archway.objectmodel.storage.xio.XIOManagementServer)
throws com.emc.archway.service.eventservice.exceptions.XIOManagementServerInvalidLoginException,
com.emc.archway.service.eventservice.exceptions.XIOConnectionFailureException,
com.emc.archway.errorMessages.XIORequestFailedException,com.emc.archway.errorMessages.XIORESTException
acp.....OK.
aix/host.pyc.....FAILED.
generic/oracle.pyc.....FAILED.
library.zip.....OK.
WARNING: 2 of 4 files do not have the same message-digest.
INFO [Thread-189340 (HornetQ-client-global-threads-1147589765)]
[] Verification failed, deploying latest acp
ERROR [Thread-189340 (HornetQ-client-global-threads-1147589765)]
[] slibclean failed: ksh: slibclean: 0403-006 Execute permission denied.
WARN [Thread-189340 (HornetQ-client-global-threads-1147589765)]
[] File is already deleted: appsync.tar
Cause
Resolution
- Confirm the following entries in sudo file. If the operator wants to use the sudo user 'appsync', then entry should be:
Defaults secure_path = /sbin:/bin:/usr/sbin:/usr/bin
appsync ALL = (root) NOPASSWD: /opt/emc/appsync/acp
- IMPORTANT: Verify the SFTP server service is running.
sftp P <Port-Number> <User-Name@AppSync-Server-IPAddress>
EXAMPLE GOOD RESPONSE:
#sftp P 22 asadmin@10.10.10.10
asadmin@10.10.10.10 password:
connected to 10.10.10.10
sftp>
EXAMPLE BAD RESPONSE:
#sftp P 22 asadmin@10.10.10.10
asadmin@10.10.10.10 password:
subsystem request failed on channel 0
connection closed
#
- Delete all the files on the client side in the /opt/emc/appsync directory.
- The ownership and correct write permissions should be there on the /opt/emc/appsync directory.
- Check the permissions of the .rsp file on the AppSync client.
- Confirm there are no firewalls blocking the SFTP operation. Try to manually transfer a file using sftp as the appsync user.
Additional Information
UNIX host plugin push install with SUDO user -> Refer AIX section.
In this case 'appsync' is the sudo user. You should add lines under sudoer file:
Defaults:appsync !env_reset
Defaults secure_path = /sbin:/bin:/usr/sbin:/usr/bin
appsync ALL = (root)NOPASSWD:/opt/emc/appsync/acp
Also See: KB article 483004: AppSync: Push install to Linux host fails when performed by a SUDO user