Access Control Advanced Parameters
Warning: Making changes to Advanced Parameters should not be undertaken unless the user understands the impact of the parameter changes. If undesired results occur, revert the settings and contact Veritas Support or visit the APTARE Community web site for further guidance.
The following advanced parameters apply to host data collection.
Admin > Advanced > Parameters, described in
Adding an Advanced Parameter. ACCESS_CONTROL_FALLBACK_STRINGS
This parameter is shipped in the Portal software and is listed in the Add Advanced Parameter window.
Valid Values: Text Strings (Default = See below)
Scope: This parameter can be set at the Domain or Data Collector level or for a specific OS, or for a specific host.
For Host Resource data collection, when this parameter is configured with error text strings, if stdout and stderr contain any of these strings, an error is reported. These errors indicate that a command has failed with sudo configuration problems.
Default text strings for this advanced parameter:
is not allowed to execute|sudo: A file or directory in the path name does not exist| not found|ermission denied|is not allowed to run sudo
ACCESS_CONTROL_PASSWORD_PROMPT
This parameter is shipped in the Portal software and is listed in the Add Advanced Parameter window.
Valid Values: Text (Default = See below)
Use this parameter to control the password prompt for the SSH access control command.
Scope: This parameter can be set at the Domain or Data Collector level or for a specific OS, or for a specific host.
Default text strings for this advanced parameter:
Password:|password:|Password for|password for
Example:
assword:|assword for" // [Pp]assword: or ?[Pp]assword for
ACCESS_CONTROL_SKIP_COMMAND_OUTPUT
Valid Values: Text
Scope: This parameter can be set at the Domain or Data Collector level, for an OS, or for a specific host.
Enter any command that you want to skip when running sudo. This can be used to prevent security violations.
ACCESS_CONTROL_TTY_REQUIRED
This parameter is shipped in the Portal software and is listed in the Add Advanced Parameter window.
Valid Values: Y or N (default = N)
Scope: This parameter can be set at the Domain or Data Collector level, for an OS, or for a specific host.
Use this parameter if your access control commands requires TTY. For example, recent versions of sudo require this functionality.
ACCESS_CONTROL_TTY_REQUIRED_ERROR
This parameter is shipped in the Portal software and is listed in the Add Advanced Parameter window.
Valid Values: Text (Default = See below)
Scope: This parameter can set the access control requirements for TTY, at the Domain or Data Collector level, for an OS, or for a specific host.
Use this parameter to configure the TTY-required error strings that would allow the Data Collector to run the program to use TTY dynamically.
Default text strings for this advanced parameter:
you must have a tty to run sudo|no tty present and no askpass program specified
ACCESS_CONTROL_TTY_REQUIRED_NUM_LINES_SKIP
This parameter is shipped in the Portal software and is listed in the Add Advanced Parameter window.
Valid Values: Numeric (default = 1)
Scope: This parameter can set the access control requirements for TTY, at the Domain or Data Collector level, for an OS, or for a specific host.
Use this in conjunction with
ACCESS_CONTROL_TTY_REQUIRED and
ACCESS_CONTROL_TTY_REQUIRED_ERROR. When TTY is enabled, sudo adds extra data that is not related to the relevant output. This parameter will help to eliminate the extra lines in the output.