Return
-
Title
What needs to be added to the 'sudoers' file when monitoring CRS and ASM? -
Description
When selecting the "Use sudo" option for the CRS and ASM monitoring agents, what needs to be added to the sudoers file on the host(s)? -
Cause
Using a sudo or root account is a not a requirement for Oracle agent monitoring and is an option available if collections are found to fail in the database agents logs. -
Resolution
For both CRS and ASM monitoring, please refer to the corresponding Oracle Cartridge Release Notes, under the section of "Programs that should be configured to be run using sudo".
Example:
UNIX Server and Programs
The following UNIX programs must be accessible to the user logged on to the UNIX and Linux computers:- On all platforms: df, du, awk, iostat, vmstat, uptime, netstat, sed, ps, uname, ls -l
- In addition, the following platform-specific programs must be available:
- On the Linux platform: /proc/vmstat, /proc/net/dev, free, /proc/cpuinfo, getconf
- On the Solaris platform: /usr/sbin/prtconf, mpstat, pagesize, psrinfo
- On the AIX platform: lsattr, lsdev, pagesize, bindprocessor, lsdev, oslevel
- On the HP-UX specific platform: bdf (instead of df), sar, /var/adm/syslog/syslog.log, /usr/sbin/ioscan, getconf, /swapinfo, InfoLog (needs to be enabled)
Programs that should be configured to be run using sudo
The sudo utility allows system administrators to grant specific users (or groups of users) the ability to run certain commands that require administrative privileges as root, without having to log in as administrator.
The programs that can be run using sudo in the various Linux and UNIX operating systems are as follows:- On all platforms, when monitoring the Clusterware using the CRS agent:
- For running the Clusterware monitoring wizard: test, uname, ps, awk, {CRS_HOME}/bin/olsnodes
- For monitoring the Clusterware: {CRS_HOME}/bin/crs_stat, tail, {CRS_HOME}/bin/crsctl
- On all platforms: df, du, awk, iostat, vmstat, uptime, netstat, sed, ps, uname, grep, ls -l
- In addition, the following platform-specific programs must be available:
- On the Linux platform: /proc/vmstat, /proc/net/dev, free, /proc/cpuinfo, getconf
- On the Solaris platform: /usr/sbin/prtconf, mpstat, pagesize, psrinfo
- On the AIX platform: lsattr, lsdev, pagesize, lsdev, bindprocessor, oslevel
On the HP-UX specific platform:- bdf (instead of df), sar, /var/adm/syslog/syslog.log, /usr/sbin/ioscan, getconf, /swapinfo, InfoLog (needs to be enabled)
UNIX User Permissions and Installation Settings- On AIX, the user must be a member of the administrator group to be able to run the sar command.
- On Linux, the sysstat package must be installed to enable the user to get detailed disk I/O information.
- On Linux the /proc filesystem must be present.
- For connection using SSH, the sshd daemon must be installed and running.
- For connection using telnet, a telnet daemon must be installed and running.
- The UNIX user should have no special processing on log-on. In particular there must be no input required from the user, and nor should any special login banners be displayed.
Additionally, ensure the Agents validate successfully and if required, execute the Grant Script manually from a command line (Ex: as SYSASM) or in the Agent Installer wizard.