Use > Data Flow Management > Data Flow Management Setup > Universal Discovery Agents > How to Install the Universal Discovery Agent to Run Under Non-Root Account on UNIX

How to Install the Universal Discovery Agent to Run Under a Non-Root Account on UNIX

This task describes how to install the UD Agent to run under a non-root account on UNIX systems.

  1. Go to Data Flow Management > Universal Discovery > Zone-based Discovery, and select a Management Zone or create a new one.

  2. In the Infrastructure Discovery activity, in the Define Credentials page, ensure that SSH and Universal Discovery protocol credentials are defined, as follows:

    • SSH protocol:

      • In the User Name and Password fields, define credentials for a non-root user for connecting to the host through the SSH network protocol.

      • In the Privileged Command Execution Properties area, define details for the Sudo prefixed command execution:

        • For the Policy, select Sudo-like.
        • For the Mode, select Sudo.
        • In the sudo paths field, make sure to include the full path to the sudo command on the remote machine. If the path is different on different computers/operating systems, you should provide multiple paths, separated by commas.
        • Enter the sudo commands. Ensure that the agentinstall.sh and nohup commands are included among these commands.
    • Universal Discovery protocol:

      • In the sudo paths field, ensure that the sudo paths defined for the SSH protocol above are also included.

      • In the sudo commands field, ensure that the sudo commands defined for the SSH protocol above are also included. Ensure that the agentinstall.sh and nohup commands are included among these commands.

  3. On the Universal Discovery Agent Deployment page:

    1. Select the deployment option: Install or Update.

    2. Clear the Install UD Agent to run under the root account on UNIX machines option.

Note  

  • After installing the UD Agent under a non-root account, the SSH credential used to install the agent must be kept in UCMDB because this credential is used to retrieve the password for the sudo command.

    If, for whatever reason, the SSH credential was removed and created again, the Host Connection by Shell job must be rerun on the relevant triggers so that the other jobs can run sudo commands successfully.

  • The Universal Discovery Agent will be run on the remote machine under the credential that was used for SSH in step 2.

Related Topics Link IconRelated Information