From: bill.thompson@goodyear.com
Date: Wed Sep 11 2002 - 07:28:37 EDT
Thanks to Connie Zolg for the one response to this post.
We've decided to try an run OpenView (ITO and NNM) without giving full root
access by using a combination of sudo and group permissions. We see how
loud they complain :-)
On another note, I'd like to apologize for the occasional response that I
send to the list. I'm not trying to work outside the post/summary
guidelines, I'm just hitting the wrong menu item! I'm using Lotus Notes and
have a habit of clicking "Reply to All with History" which in this case
ends up sending the reply to the list as well as to the poster. Dohh!
Bill Thompson
The Goodyear Tire & Rubber Company
Contains Confidential and/or Proprietary Information.
May Not Be Copied or Disseminated Without Express Consent of The Goodyear
Tire & Rubber Company.
Original email follows:
>Admins,
>
>We are finishing up a new installation of HP OpenView to monitor all of
our
>UNIX, NT, and AS/400 servers.
>
>We have a group that will be responsible for maintaining OV on all the
UNIX
>boxes.
>
>The problem I'm running into is it OV was installed by root. It looks as
>though it will require root access to maintain the product.
>
>Is this correct? (I hope not!) Is this the way others are managing
>OpenView?
>
>We previously had BMC's Patrol on a few of the UNIX servers. It ran almost
>entirely as user "patrol" with a few suid executables. Our operations
group
>was able to maintain the product with just minimal root access (granted
>through sudo).
>
>I hate to think I've got to give full root access to all of our UNIX
>machines just to maintain a monitoring product. (Some of these machines
are
>in a High Availability Cluster!)
>
>We have very capable people, but they are not trained UNIX admins and
>(IMHO) should not have full root access.
>
>Is full root access the only way to administer (start, stop, debug
>problems, add scripts, etc.) OpenView?
>
>Any thoughts or comments are welcome. If you are maintaing OV without
root,
>please let me know how you're doing this.
--
---> Please post QUESTIONS and SUMMARIES only!! <---
To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
Name: hpux-admin@dutchworks.nl Owner: owner-hpux-admin@dutchworks.nl
Archives: ftp.dutchworks.nl:/pub/digests/hpux-admin (FTP, browse only)
http://www.dutchworks.nl/htbin/hpsysadmin (Web, browse & search)
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:19 EDT