Linux ADC Error – Privilege Issue (Command Execution Failed)
Overview
The Cloudamize ADC successfully logs into the target host, but encounters a failure because the account lacks the necessary administrative permissions. You will typically see an error similar to:
"Login to the host was successful. However, a command didn't work due to a privilege issue. The required commands are"
Root Cause
The ADC must run specific system-level commands to gather hardware and network metadata. If the account is not a member of the root or wheel groups or has not been granted specific sudo permissions, these commands will fail, and data collection will remain empty.
Troubleshooting Steps
To resolve this without using the root account, you must append specific permissions to the host's configuration.
1. Access the Configuration
Elevated permissions must be added to the system by editing the /etc/sudoers file or a file within the /etc/sudoers.d/ directory. This should be performed using the sudo visudo command to ensure the syntax is validated.
2. Append Required Configuration
Append the following lines to the end of the file. (Replace cloudamize with your actual service account name):
cloudamize ALL=(ALL) NOPASSWD:/usr/bin/netstat,/usr/bin/ss,/usr/sbin/dmidecode,/usr/sbin/lvs,/usr/sbin/pvs,/usr/bin/readlink,/usr/bin/cat,/usr/sbin/multipath,/usr/bin/ls
Defaults:cloudamize !requiretty
Configuration Details
Binary Path Access: The ADC requires access to the specific binary paths listed (e.g.,
/usr/sbin/dmidecode,/usr/bin/netstat). These tools are essential for identifying performance-related data.NOPASSWD: This is required because the ADC is an automated tool. It doesnot respond to interactive password challenges. This setting allows authorized commands to proceed automatically while still maintaining a restricted command set.
!requiretty: This setting is necessary to allow the ADC to execute commands remotely via an SSH socket. Many Linux security policies prevent
sudofrom functioning if a physical or virtual terminal is not present.
Final Validation
Once the lines have been appended and the file is saved, return to the Cloudamize ADC interface and re-run the "Test Connection" or "Add Host" task. The status should now progress to "Success."
If the issue persists, please capture a screenshot of the error output and collect the log_backup.txt file from the following directory on the Cloudamize Agentless DC:
C:\Program Files (x86)\CloudamizeAgentlessDc\log_backup.txt
Please attach both the screenshot and the log file in an email to helpdesk@cloudamize.com for further investigation.