...
To uncompress and extract the installation files from the product distribution file, issue the following command:
Panel | ||
---|---|---|
|
This command assumes that the name of the distribution file is sb-7.2.x.x-linux-3.10-x86_64.tar.Z.
...
To uncompress and extract the installation files from the product distribution file, issue the following command:
Panel |
---|
...
|
...
Distribution File
|
This command assumes that the name of the distribution file is sb-7.2.x.x-linux-3.10-s390x.tar.Z
.
Distribution File
The following table identifies the files contained in the distribution file.
...
To uncompress and extract the installation files from the product distribution file, issue the following command:
Panel | ||
---|---|---|
|
This command assumes that the name of the distribution file is sb-7.2.x.x-linux-3-x86_64-deb.tar.Z
.
...
To uncompress and extract the installation files from the product distribution file, issue the following command:
Panel |
---|
...
|
This command assumes that the name of the distribution file is sb-7.2.x.x-linux-3.10-ppc64le.tar.Z
.
...
To start the installation script, unvinst, issue the following command:
Panel |
---|
See Linux Installation Script Parameters and Installation Script Example, below, for a description of the optional parameters that you can issue with unvinst and an example of unvinst with these parameters.
Note | ||
---|---|---|
| ||
If you want to install multiple Agents on the same machine, or add one or more additional Agents to a machine with a previously installed Agent, some of these installation parameters are required (see Installing Multiple Agents on a Single Machine). |
...
The Universal Broker daemon will be installed and run as the username and groupname specified with the installation script parameters, below.
Note | ||
---|---|---|
| ||
For this release of Linux RPM, the previous non-RPM version will not be uninstalled. The Administrator can remove the remaining files/directories as needed. |
...
The following table describes the optional parameters that are available in the UNIX install script (unvinst
) when installing Universal Agent.
The parameters are grouped into the following categories:
...
Category
...
Description
...
...
Used for base install.
...
...
Used for an active OMS configuration.
...
...
Used for an active UAG configuration.
...
...
Used for Universal Controller CLI programs install.
...
...
Used for user mode installation.
...
...
Used to manage third-party components.
...
Parameter
...
Description
...
Default
...
Normal UNIX username that is used to execute the Universal Broker daemon. The install grants this user account ownership of all installed files, with the exception of the Universal Agent server components (for example: ucmsrv, udmsrv, and uemsrv) which, due to security requirements, are owned by root and will have their "set user ID on execution" bit set.
...
|
See Linux Installation Script Parameters and Installation Script Example, below, for a description of the optional parameters that you can issue with unvinst and an example of unvinst with these parameters.
Note | ||
---|---|---|
| ||
If you want to install multiple Agents on the same machine, or add one or more additional Agents to a machine with a previously installed Agent, some of these installation parameters are required (see Installing Multiple Agents on a Single Machine). |
This is a silent install. The output from unvinst is written to file install.log in the current directory. The Agent is installed into directory /opt.
The Universal Broker daemon will be installed and run as the username and groupname specified with the installation script parameters, below.
Note | ||
---|---|---|
| ||
For this release of Linux RPM, the previous non-RPM version will not be uninstalled. The Administrator can remove the remaining files/directories as needed. |
Anchor | ||||
---|---|---|---|---|
|
The following table describes the optional parameters that are available in the UNIX install script (unvinst
) when installing Universal Agent.
The parameters are grouped into the following categories:
Category | Description |
---|---|
Used for base install. | |
Used for an active OMS configuration. | |
Used for an active UAG configuration. | |
Used for Universal Controller CLI programs install. | |
Used for user mode installation. | |
Used to manage third-party components. |
The following example illustrates Universal Agent for Linux installed with the installation script, unvinst, and optional parameters.
...
Parameter | Description | Default | ||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
-u
| Normal UNIX username that is used to execute the Universal Broker daemon. The install grants this user account ownership of all installed files, with the exception of the Universal Agent server components (for example: ucmsrv, udmsrv, and uemsrv) which, due to security requirements, are owned by root and will have their "set user ID on execution" bit set.
| ubroker | ||||||
‑create_user
| Specification (yes or no) for whether or not to create the user name that will own the installed files as a local user. | yes | ||||||
‑userdir | Home directory for the created user account specified by --user.
|
| ||||||
-g | Normal UNIX groupname; the Universal Broker daemon will run as this specified group. All installed files will be assigned to this group.
| ubroker | ||||||
‑create_usergroup
| Specification (yes or no) for whether or not to create the user name group that will own the installed files as a local usergroup. | yes | ||||||
‑userdir | Home directory for the created user account specified by --user.
|
| ||||||
-g | Normal UNIX groupname; the Universal Broker daemon will run as this specified group. All installed files will be assigned to this group.
| ubroker | ||||||
Anchor | --create_group | --create_group | ‑‑create_groupSpecification (yes or no) for whether or not to create the group that will own the installed files as a local group. | yes | ||||
Anchor | -keystore | -keystore | ‑keystoreSpecification (yes or no) for whether or not to create encryption keys during installation and set up the local Universal Broker as a keystore owner. | no | ||||
-security | Sets the value (default, inherit, pam, pam_sessions, or trusted) of the following configuration options for Universal Agent server components:
The appdef value for -security controls how product configuration options are set; it does not map to a product configuration option.
| (none) | ||||||
-ubroker_start --ubroker_start | Specifies (yes or no) whether or not Universal Broker is started by the Installer when installation is completed. If --ubroker_start is not included in the script, Universal Broker will be started when installation is complete.
| yes | ||||||
Anchor | UAG | UAG | UAG Parameters-c||||||
Anchor | --convert_opsagent | --convert_opsagent | ‑‑convert_opsagentCauses
| |||||
-d | If --convert_opsagent is specified: Identifies the primary install directory for Universal Agent.
|
| ||||||
Anchor | --oms_servers | --oms_servers | ‑‑oms_serversSpecifies a value, in the format
| (none) | ||||
‑ac_agent_clusters | Specifies the Universal Controller-defined clusters to which this agent will belong. | (none) | ||||||
‑ac_agent_ip | Specifies the IP address or host name (which resolves to an IP address) that the Agent reports to the Controller. | (none) | ||||||
‑ac_netname | Specifies the network ID that Universal Agent will use. | (none) | ||||||
-ac_extension_accept_list | Specifies a comma-separated list of one or more Universal Extensions that the agent will accept via auto-deployment from the Controller.
The value specified for this parameter sets the EXTENSION_ACCEPT_LIST configuration option value. | * | ||||||
-ac_extension_python_list --ac_extension_python_list | Specifies a comma-separated list of zero or more Python locations. Each item in the list is expected to contain a complete path to a Python executable. The value specified for this parameter sets the EXTENSION_PYTHON_LIST configuration option value. | /usr/bin/python3,/usr/bin/python,/usr/libexec/platform-python | ||||||
-ac_extension_deploy_on_registration --ac_extension_deploy_on_registration | Controls Extension deployment behavior from the Universal Controller.
The value specified for this parameter sets the EXTENSION_DEPLOY_ON_REGISTRATION configuration option value. | no | ||||||
-ac_extension_cancel_timeout | Set the EXTENSION_CANCEL_TIMEOUT UAG configuration option, which specifies the length of time a Universal Extension task is given to complete its response to a CANCEL request. If the task fails to finish its own termination processing within the specified timeout period, UAG Server will forcefully terminate the task. The specified timeout must be numeric, but a one-letter suffix is accepted to specify (s)econds, (m)inutes, (h)ours, or (d)ays. If no time unit is specified, the default is seconds. The following maximums are enforced:
Minute, hour, and day maximums are set to ensure that their value represented as a number of seconds does not exceed 2147483647. | 10 | ||||||
-ac_process_cancel_timeout | Set the PROCESS_CANCEL_TIMEOUT UAG configuration option, which specifies the length of time an OS task is given to complete its response to a CANCEL request. If the task fails to finish its own termination processing within the specified timeout period, UAG Server will forcefully terminate the task. The specified timeout must be numeric, but a one-letter suffix is accepted to specify (s)econds, (m)inutes, (h)ours, or (d)ays. If no time unit is specified, the default is seconds. The following maximums are enforced:
Minute, hour, and day maximums are set to ensure that their value represented as a number of seconds does not exceed 2147483647. | 10 | ||||||
‑ac_enable_ssl | This option is deprecated starting with Universal Agent 7.1.0.0. UAG Server will always attempt to use SSL/TLS for OMS connections. | n/a | ||||||
Anchor | --uag_autostart | --uag_autostart | ‑‑uag_autostartSpecifies (yes or no) whether or not the Universal Automation Center Agent (UAG) Server starts automatically when the Universal Broker is started. | yes | ||||
Anchor | OMS | OMS | OMS Parameters||||||
‑oms_port | Specifies the port to use to listen for OMS connection requests. | (none) | ||||||
Anchor | --oms_autostart | --oms_autostart | ‑‑oms_autostartSpecifies (yes or no) whether or not OMS is started automatically by Universal Broker when Universal Broker starts. | no | ||||
Anchor | CLI | CLI | CLI Parameters‑opscli||||||
Anchor | --opscli | --opscli | ‑‑opscliSpecifies (yes or no) whether or not the Universal Controller Command Line Interface (CLI) tools will be installed. | no | ||||
Anchor | User Mode | User Mode | User Mode Parameters||||||
Anchor | --usermode_install | --usermode_install | -USpecifies (yes or no) for a user mode installation, which defines both of the following:
| no | ||||
Anchor | --unvdir | --unvdir | -unvdir||||||
Anchor | unvdir | unvdir | --unvdirIf --usermode_install is set to yes: Specifies the Agent binaries (installation) directory. | (none) | ‑unvcfgdir||||
Anchor | unvcfgdir | unvcfgdir | ‑‑unvcfgdirIf --usermode_install is set to yes: Specifies the Agent configuration files directory. |
| ‑unvdatadir||||
Anchor | unvdatadir | unvdatadir | ‑‑unvdatadirIf --usermode_install is set to yes: Specifies the Agent data files directory. |
| ‑unvport||||
Anchor | unvport | unvport | ‑‑unvportIf --usermode_install is set to yes: Specifies the Universal Broker port. | (none) | ||||
Anchor | Third-party | Third-party | Third-Party Parameters‑python||||||
Anchor | python | python | ‑‑pythonSpecifies (yes or no) whether the Python 3.7 Distribution for Universal Agent is installed. | no | Additional Parameter | |||
-? | Displays command line help. | n/a |
...
‑‑keystore | Specification (yes or no) for whether or not to create encryption keys during installation and set up the local Universal Broker as a keystore owner. | no | ||||||||||||
-security | Sets the value (default, inherit, pam, pam_sessions, or trusted) of the following configuration options for Universal Agent server components:
The appdef value for -security controls how product configuration options are set; it does not map to a product configuration option.
| (none) | ||||||||||||
-ubroker_start --ubroker_start | Specifies (yes or no) whether or not Universal Broker is started by the Installer when installation is completed. If --ubroker_start is not included in the script, Universal Broker will be started when installation is complete.
| yes | ||||||||||||
| ||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
-c
| Causes
| |||||||||||||
-d | If --convert_opsagent is specified: Identifies the primary install directory for Universal Agent.
|
| ||||||||||||
‑oms_servers
| Specifies a value, in the format
| (none) | ||||||||||||
‑ac_agent_clusters | Specifies the Universal Controller-defined clusters to which this agent will belong. | (none) | ||||||||||||
‑ac_agent_ip | Specifies the IP address or host name (which resolves to an IP address) that the Agent reports to the Controller. | (none) | ||||||||||||
‑ac_netname | Specifies the network ID that Universal Agent will use. | (none) | ||||||||||||
-ac_extension_accept_list | Specifies a comma-separated list of one or more Universal Extensions that the agent will accept via auto-deployment from the Controller.
The value specified for this parameter sets the EXTENSION_ACCEPT_LIST configuration option value. | * | ||||||||||||
-ac_extension_python_list --ac_extension_python_list | Specifies a comma-separated list of zero or more Python locations. Each item in the list is expected to contain a complete path to a Python executable. The value specified for this parameter sets the EXTENSION_PYTHON_LIST configuration option value. | /usr/bin/python3,/usr/bin/python,/usr/libexec/platform-python | ||||||||||||
-ac_extension_deploy_on_registration --ac_extension_deploy_on_registration | Controls Extension deployment behavior from the Universal Controller.
The value specified for this parameter sets the EXTENSION_DEPLOY_ON_REGISTRATION configuration option value. | no | ||||||||||||
-ac_extension_cancel_timeout | Set the EXTENSION_CANCEL_TIMEOUT UAG configuration option, which specifies the length of time a Universal Extension task is given to complete its response to a CANCEL request. If the task fails to finish its own termination processing within the specified timeout period, UAG Server will forcefully terminate the task. The specified timeout must be numeric, but a one-letter suffix is accepted to specify (s)econds, (m)inutes, (h)ours, or (d)ays. If no time unit is specified, the default is seconds. The following maximums are enforced:
Minute, hour, and day maximums are set to ensure that their value represented as a number of seconds does not exceed 2147483647. | 10 | ||||||||||||
-ac_process_cancel_timeout | Set the PROCESS_CANCEL_TIMEOUT UAG configuration option, which specifies the length of time an OS task is given to complete its response to a CANCEL request. If the task fails to finish its own termination processing within the specified timeout period, UAG Server will forcefully terminate the task. The specified timeout must be numeric, but a one-letter suffix is accepted to specify (s)econds, (m)inutes, (h)ours, or (d)ays. If no time unit is specified, the default is seconds. The following maximums are enforced:
Minute, hour, and day maximums are set to ensure that their value represented as a number of seconds does not exceed 2147483647. | 10 | ||||||||||||
‑ac_enable_ssl | This option is deprecated starting with Universal Agent 7.1.0.0. UAG Server will always attempt to use SSL/TLS for OMS connections. | n/a | ||||||||||||
‑uag_autostart
| Specifies (yes or no) whether or not the Universal Automation Center Agent (UAG) Server starts automatically when the Universal Broker is started. | yes | ||||||||||||
| ||||||||||||||
‑oms_port | Specifies the port to use to listen for OMS connection requests. | (none) | ||||||||||||
‑oms_autostart
| Specifies (yes or no) whether or not OMS is started automatically by Universal Broker when Universal Broker starts. | no | ||||||||||||
| ||||||||||||||
‑opscli
| Specifies (yes or no) whether or not the Universal Controller Command Line Interface (CLI) tools will be installed. | no | ||||||||||||
| ||||||||||||||
-usermode_install --usermode_install | Specifies (yes or no) for a user mode installation, which defines both of the following:
| no | ||||||||||||
| If --usermode_install is set to yes: Specifies the Agent binaries (installation) directory. | (none) | ||||||||||||
‑unvcfgdir
| If --usermode_install is set to yes: Specifies the Agent configuration files directory. |
| ||||||||||||
‑unvdatadir
| If --usermode_install is set to yes: Specifies the Agent data files directory. |
| ||||||||||||
‑unvport
| If --usermode_install is set to yes: Specifies the Universal Broker port. | (none) | ||||||||||||
| ||||||||||||||
‑python
| Specifies (yes or no) whether the Python 3.7 Distribution for Universal Agent is installed. | no | ||||||||||||
Additional Parameter | ||||||||||||||
-? | Displays command line help. | n/a |
Anchor | ||||
---|---|---|---|---|
|
The following example illustrates Universal Agent for Linux installed with the installation script, unvinst, and optional parameters.
Panel | ||
---|---|---|
|
Anchor | ||||
---|---|---|---|---|
|
...
Listing Universal Agent for Linux Information
RPM Commands
Information
...
on installed packages is listed with the rpm command. The command must be executed with the superuser ID.
To list information for the Universal Agent for Linux, issue the following command:
Panel | ||
---|---|---|
|
Debian Commands
Information on installed packages is listed with the rpm dpkg command. The command must be executed with the superuser IDauthority.
To list information for the Universal Agent for Linux, issue the following commandcommands:
Panel |
---|
Debian Commands
Information on installed packages is listed with the dpkg command. The command must be executed with superuser authority.
To list information for the Universal Agent for Linux, issue the following commands:
...
Removing Universal Agent for Linux
System Install Removal
...
Step 1
...
Stop the ubrokerd daemon.
...
Step 2
...
|
Removing Universal Agent for Linux
System Install Removal
Step 1 | Stop the ubrokerd daemon. | ||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Step 2 | Make a backup copy of the | ||||||||||||||||||||||||||||||||
Step 3 | RPM Commands
/etc/universal directories. | Step 3 | RPM Commands
| ||||||||||||||||||||||||||||||
Step 4 | Delete the Agent user account (
| ||||||||||||||||||||||||||||||||
Step 5 | Delete the Agent group (
|
User Mode Install Removal
Step 1 | Stop the Usermode Broker. | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Step 2 | Make a backup copy of the | ||||||||||||
Step 3 | Using the superuser ID, remove all Universal Agent for Linux packages by issuing the following commands:
| ||||||||||||
Step 4 | Delete the Agent user account (
| ||||||||||||
Step 5 | Delete the Agent group (
|
Note | ||
---|---|---|
| ||
To remove an Agent executing in an unprivileged user mode environment (see User Mode Installation), simply stop the |
...
All supported Linux installations - except for SUSE 9 and below - require the sample PAM configuration file delivered with Universal Agent to be copied to directory /etc/pam.d:
Panelpanel | ||
---|---|---|
|
PAM Configuration File
All Universal Agent components utilize the same PAM configuration file.
...
Universal Agent for Redhat systems 5.0 and greater
auth | include | system-auth-auth |
auth | required | pam_nologin.so |
account | include | system-auth |
Universal Agent for SUSE-based systems 10.0 and greater
auth | required | pam_unix2.so nullok |
auth | required | pam_nologin.so |
account | include | common-account |
Alternative Universal Agent for SUSE 10.1
auth | required | pam_unix2.so nullok |
auth | required | pam_nologin.so |
account | include | systemcommon-authaccount |
...
auth | required | pam_unix2.so nullok |
auth | required | pam_nologin.so |
account | include | common-account |
...
auth | required | pam_unix2.so nullok |
auth | required | pam_nologin.so |
account | include | common-account |
Configuring the Agent to Run a Task without a Password
Prior to release 5.1, Universal Automation Center used the ops_suexec.nopass file, which listed all trusted users.
As of release 5.1, this file no longer is used. To apply your desired security configuration, access the UAG SECURITY configuration option in the uags.conf
configuration file:
...
Configuring the Agent to Run a Task without a Password
Prior to release 5.1, Universal Automation Center used the ops_suexec.nopass file, which listed all trusted users.
As of release 5.1, this file no longer is used. To apply your desired security configuration, access the UAG SECURITY configuration option in the uags.conf
configuration file:
Html bobswift |
---|
<ul>
<li> If you do not want security, set the value to <b>none</b>.
<li> If you want security, set the value to <b>pam</b> and update the following files:
<ul>
<li> Check the <b>/etc/pam.d/ucmd</b> configuration file to ensure that it contains the minimum PAM security settings (see |
Examples of Customized PAM Configuration Files,
Html bobswift |
---|
above).
<li> Add the following to <b>/etc/universal/uacl.conf</b> for each user: <b>uag_work_request [username],allow,noauth</b>
<br>
Also, verify that the user has a <b>/home</b> directory defined.
</ul>
</ul>
|