Tuesday, May 29, 2018

WARNING: NMO not setuid-root (Unix-only) 13c OEM


For the past Few days my OEM jobs on my DEV server are getting SUSPENDED , tried to schedule multiple time after failure and still they are NOT running they are all in SUSPENDED State.

Agent is up and running and I tried stop, start ,clear, secure, upload, reload all sort of agent commands and still my jobs getting SUSPENDED

From the server all looks good.

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_inst/bin $ ./emctl status agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
---------------------------------------------------------------
Agent Version          : 13.2.0.0.0
OMS Version            : 13.2.0.0.0
Protocol Version       : 12.1.0.1.0
Agent Home             : /opt/oracle/product/oemagent/agent13c_dev/agent_inst
Agent Log Directory    : /opt/oracle/product/oemagent/agent13c_dev/agent_inst/sysman/log
Agent Binaries         : /opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0
Core JAR Location      : /opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/jlib
Agent Process ID       : 261231
Parent Process ID      : 261232
Agent URL              : https://mydev01.domain.local:3872/emd/main/
Local Agent URL in NAT : https://mydev01.domain.local:3872/emd/main/
Repository URL         : https://mydevoms.domain.local:4903/empbs/upload
Started at             : 2018-03-21 12:25:23
Started by user        : oracle
Operating System       : Linux version 2.6.32-696.23.1.el6.x86_64 (amd64)
Number of Targets      : 23
Last Reload            : (none)
Last successful upload                       : 2018-03-21 12:59:32
Last attempted upload                        : 2018-03-21 12:59:32
Total Megabytes of XML files uploaded so far : 0.37
Number of XML files pending upload           : 0
Size of XML files pending upload(MB)         : 0
Available disk space on upload filesystem    : 38.65%
Collection Status                            : Collections enabled
Heartbeat Status                             : Ok
Last attempted heartbeat to OMS              : 2018-03-21 13:00:45
Last successful heartbeat to OMS             : 2018-03-21 13:00:45
Next scheduled heartbeat to OMS              : 2018-03-21 13:01:45

---------------------------------------------------------------
Agent is Running and Ready

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_inst/bin $ ./emctl upload agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
---------------------------------------------------------------
EMD upload completed successfully

FROM my OEM I see Agent is fine and up and running (but with additional warning)


WARNING: 
NMO not setuid-root (Unix-only). Run root.sh script to correct this problem. The next OS Command Job submitted will clear this alert.

According to (Doc ID 1465278.1) this is what I have followed

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/sbin $ ls -lrht
total 33M
-rw-r----- 1 oracle dba 9.4K Aug  1  2016 nmr_macro_list
-rwx--x--x 1 oracle dba 4.6M Sep 30  2016 nmo.0
-rwx--x--x 1 oracle dba 4.5M Sep 30  2016 nmoconf
-rwx--x--x 1 oracle dba  52K Sep 30  2016 nmb.0
-rwx--x--x 1 oracle dba  50K Sep 30  2016 nmgsshe.0
-rwx------ 1 oracle dba 103K Sep 30  2016 nmr.0
-rwx------ 1 oracle dba  34K Sep 30  2016 nmrconf
-rwx--x--x 1 oracle dba 4.5M Sep 30  2016 nmosudo.0
-rwx--x--x 1 oracle dba 4.5M Sep 30  2016 nmopdpx.0
-rwx--x--x 1 oracle dba 104K Sep 30  2016 nmhs.0
-rwxr-x--- 1 oracle dba 103K Feb 23  2017 nmr
-rwxr-xr-x 1 oracle dba 4.5M Feb 23  2017 nmosudo
-rw-r----- 1 oracle dba  188 Feb 23  2017 nmo_public_key.txt
-rwxr-xr-x 1 oracle dba 4.5M Feb 23  2017 nmopdpx
-rwxr-x--- 1 oracle dba 4.6M Feb 23  2017 nmo
-rwxr-x--- 1 oracle dba 104K Feb 23  2017 nmhs
-rwxr-xr-x 1 oracle dba  50K Feb 23  2017 nmgsshe
-rwxr-x--- 1 oracle dba  52K Feb 23  2017 nmb


mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0 $ ls -lrth root*
-rwxr-xr-x 1 oracle dba 4.7K Feb 23  2017 root.sh.template
-rwxr-xr-x 1 oracle dba 4.8K Feb 23  2017 root.sh


[root@mydev01 root] # /opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/root.sh
Finished product-specific root actions.
/etc exist


Once Root.sh script ran, I see permissions now changed.

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0 $ cd sbin/
mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/sbin $ ls -lrht
total 37M
-rw-r----- 1 root   dba  9.4K Aug  1  2016 nmr_macro_list
-rwx--x--x 1 oracle dba  4.6M Sep 30  2016 nmo.0
-rwx--x--x 1 oracle dba  4.5M Sep 30  2016 nmoconf
-rwx--x--x 1 oracle dba   52K Sep 30  2016 nmb.0
-rwx--x--x 1 oracle dba   50K Sep 30  2016 nmgsshe.0
-rwx------ 1 oracle dba  103K Sep 30  2016 nmr.0
-rwx------ 1 oracle dba   34K Sep 30  2016 nmrconf
-rwx--x--x 1 oracle dba  4.5M Sep 30  2016 nmosudo.0
-rwx--x--x 1 oracle dba  4.5M Sep 30  2016 nmopdpx.0
-rwx--x--x 1 oracle dba  104K Sep 30  2016 nmhs.0
-rwx--x--x 1 root   root 4.6M Mar 21 13:20 nmo.new.bak
-rw-r----- 1 root   dba   188 Mar 21 13:20 nmo_public_key.txt
-rwsr-x--- 1 root   dba  4.6M Mar 21 13:20 nmo
-rwsr-x--- 1 root   dba  104K Mar 21 13:20 nmhs
-rwsr-x--- 1 root   dba   52K Mar 21 13:20 nmb
-rwx------ 1 root   root 103K Mar 21 13:20 nmr.new.bak
-rwsr-x--- 1 root   dba  103K Mar 21 13:20 nmr
-rwxr-xr-x 1 root   dba  4.5M Mar 21 13:20 nmosudo
-rwxr-xr-x 1 root   dba   50K Mar 21 13:20 nmgsshe
-rwxr-xr-x 1 root   dba  4.5M Mar 21 13:20 nmopdpx

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/sbin $ cd ../bin
mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/bin $ ./emctl status agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
---------------------------------------------------------------
Agent Version          : 13.2.0.0.0
OMS Version            : 13.2.0.0.0
Protocol Version       : 12.1.0.1.0
Agent Home             : /opt/oracle/product/oemagent/agent13c_dev/agent_inst
Agent Log Directory    : /opt/oracle/product/oemagent/agent13c_dev/agent_inst/sysman/log
Agent Binaries         : /opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0
Core JAR Location      : /opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/jlib
Agent Process ID       : 261231
Parent Process ID      : 261232
Agent URL              : https://mydev01.domain.local:3872/emd/main/
Local Agent URL in NAT : https://mydev01.domain.local:3872/emd/main/
Repository URL         : https://mydevoms.domain.local:4903/empbs/upload
Started at             : 2018-03-21 12:25:23
Started by user        : oracle
Operating System       : Linux version 2.6.32-696.23.1.el6.x86_64 (amd64)
Number of Targets      : 23
Last Reload            : (none)
Last successful upload                       : 2018-03-21 13:19:32
Last attempted upload                        : 2018-03-21 13:19:32
Total Megabytes of XML files uploaded so far : 0.41
Number of XML files pending upload           : 0
Size of XML files pending upload(MB)         : 0
Available disk space on upload filesystem    : 38.65%
Collection Status                            : Collections enabled
Heartbeat Status                             : Ok
Last attempted heartbeat to OMS              : 2018-03-21 13:20:46
Last successful heartbeat to OMS             : 2018-03-21 13:20:46
Next scheduled heartbeat to OMS              : 2018-03-21 13:21:47

---------------------------------------------------------------
Agent is Running and Ready

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/bin $ ./emctl stop agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
Stopping agent ... stopped.

mydev01:NOTSET:/opt/oracle/product/oemagent/agent13c_dev/agent_13.2.0.0.0/bin $ ./emctl start agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
Starting agent ............. started.

Now I see Warning message is Gone in OEM.

Auto Scroll Stop Scroll