Discovery of Linux servers with MACs and ciphers enabled for SSH connections
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-21-2017 02:26 AM
Linux Engineering Team want to enable MACs and ciphers for all SSH connections to all Linux servers. We tried discovering one of the test servers with MACs and ciphers enabled. The discovery failed on SSH authentication. Please suggest on how we overcome this issue.
- Labels:
-
Discovery
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎12-12-2017 12:46 AM
Thanks Timothy. The property worked fine. Able to scan the device and get information. Although few of the information is not coming like Running processes and disk information, but it will be fine if we check deeply access provided to this sudo user.
This is warning coming for now:
User linuxdisc has no right to run fdisk -l under sudo;
User linuxdisc has no right to run dmsetup ls under sudo;
User linuxdisc has no right to run dmsetup table under sudo;
User linuxdisc has no right to run multipath -ll under sudo;
You can also put your input if something specific we need to check.
Thanks for your help. You made my day.
Thanks to others as well for their responses.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎12-12-2017 12:49 AM
This is warning coming for now:
User linuxdisc has no right to run fdisk -l under sudo;
User linuxdisc has no right to run dmsetup ls under sudo;
User linuxdisc has no right to run dmsetup table under sudo;
User linuxdisc has no right to run multipath -ll under sudo;
That bit's easily fixable - I take it your admins can add the relevant entries in /etc/sudoers.d/ ...?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎12-12-2017 08:13 AM
Ok, good.
Now you just need to get sudoers configured - UNIX and Linux commands requiring root privileges for Discovery and Orchestration
...and maybe mark helpful where appropriate.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎12-13-2017 08:01 AM
Hi Timothy,
I am able to get al information for a Linux machine. Now the issue is with Installed application. For example we have Informatica running on this Linux server . When I open the XML for input ECC queue of 'Unix - Application Dependency Mapping' probe , it says that it recognized Informatica. But I cannot see 'Inforamtica' in Either running process or TCP connections. Other processes are coming in fine. Also, I believe the Informatica should also create an entry in application table, which it is not creating. Further the Discovery is not showing mapping between running processes and hardware machine(Not sure if should come, but we are expecting a relationship should come for Informatica and this Linux machine). Below is screenshot of XML where Informatica is discovered.
Kindly assist if you got to know what I am doing wrong here in.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎12-13-2017 08:31 AM
Looking at that output:
- informatica is the application name
- java is the process name
i.e.: "Word For Windows" is not the same as "winword.exe"