Installing CA Spectrum to Linux Host per sudoers configuration

Document ID : KB000115958
Last Modified Date : 28/09/2018
Show Technical Document Details
Introduction:
Installing CA Spectrum with SRAdmin per sudoers fails.

Using "sdiclinux" frontend installation tool shows message:
<hostnameA>:  SPC-INT-20074: Insufficient privileges on <hostnameA>

 
Background:
CA Spectrum install requires for Linux platform installation "root"(administrative) permission for the "connection user" context. 
The CA Spectrum install is a 2tier installation process with frontend installation tool (GUI or cmd-line tool / sdic* or setup* - i.e. at <hostA> ) connecting to backend installation tool/sradmin service at i.e. <hostB>.
The connection is a TCP-based communication using the "connection user" context given by the frontend installation tool to validate context at backend sradmin service.

Once the required permission for the "connection user" context is validated by the backend sradmin service, then the install starts by sending the installation/media data from the frontend tool at <hostA> to the sradmin service at <hostB>. The install then is executed by the backend sradmin service and is finally modified as appropriate to be owned by the Spectrum installation owner account. 

 
Environment:
This applies to all supported CA Spectrum releases when installing CA Spectrum to a Linux host.
 
Instructions:
Follow instructions from the CA Spectrum documentation - find this i.e. from:
https://docops.ca.com/ca-spectrum/10-3-0/en/installing-and-upgrading/fresh-install/sradmin-installation-methods

In the CA Spectrum documentation search for "SRAdmin Installation Methods" / section "Grant Limited Root Permissions (Linux)"
This covers advise to create a "sudoers" symbolic link in the "SRAdmin" installation directory to file "sradmin_conf" created under /etc/sudoers.d/sradmin_conf then.

The important item is the content for the "sudoers" file - which covers per single line:
<username> <client_host> = <path_to_sraadmin>/sradmin.exe

This is a bit different to the "standard" of using "sudo"/"sudoers" - so this line covers then:

<username>
This the "Connection User" for the frontend install tool to connect to the "sradmin". This is not the Spectrum installation user/account.

<client_host>
This is the "hostname" on which the install-frontend app runs. Not the destination/local hostname on which "sradmin" runs.
Means - in case frontend installer app (GUI or sdic) runs on <hostA> - and NOT destination (install) host is <hostB>

<path_to_sraadmin>
This is the path where "sradmin" (backend install tool) is installed on the Destination Host ( <hostB> )

Sample:
spectrum <hostA>=/opt/SRAdmin/sradmin.exe
 
Additional Information:
In case the "sudoers" configuration is not appropriate you may find following error/messages returned by the frontend installation tool:

Using " sdiclinux " frontend installation tool shows message :

<hostnameA>: SPC-INT-20074: Insufficient privileges on <hostnameA>
<hostnameA>: Spectrum Installation requires either ROOT access, SUDO privileges or Administrator privileges.
             Please see the Spectrum Installation Guide (Document number 5136) for more information regarding SUDO. 



Using GUI setup frontend installation tool shows message(popup message box):
Messagebox: 
     Unable to Connect
Message:
     Unable to connect to CA Spectrum Remote Administration Daemon (sradmin).
   SPC-INT-20026: Unable to authenticate with SRADmin on <hostnameA>



Running at the install destination host <hostB> the "sudo -l" command is misleading. This may not show the "Spectrum related sudoers" configuration as it refers to the context of this user/account on this host. So "sudo -l" does not show any config but the install works due to the Spectrum internal code. Along with this the "sudo" logging at OS-level will not show a "sudo" action during install too.