Question & Answer
Question
Because of security restrictions, the NIM, VIOS and HMC servers used for TSAM require to execute everything using SUDO. I would like to know if it is possible to use SUDO when deploying Power virtual machines?
Answer
TPM has the following support for the 'sudo' functionality at TPM core level ( SSH Service Access Points / Device.ExecuteCommand):
http://pic.dhe.ibm.com/infocenter/tivihelp/v45r1/topic/com.ibm.tivoli.tpm.wkf.doc/workflows/twkf_sudo.html
However the pSeries-Server and NIM tc-drivers do not have the full 'sudo' support (even if the steps described in the doc are done to configure SSH SAP for HMC and NIM computers) - see the limitations below:
- 'sudo' functionality will work only for the TPM create/remove LPAR, NIM deployment, dynamic resource allocations (CPU/memory)
- NIM discovery and HMC discovery will not support 'sudo' functionality, because the Device.ExecuteCommand workflow is not used in the these discoveries (commands are run directly from the perl script).
- Live Partition Mobility will not support 'sudo' functionality (HMC discovery, which does not support 'sudo', is run during the LPM workflow).
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
swg21678500