IBM Support

Unable to start Ping Probe by non-root user on AIX

Technote (troubleshooting)

This document applies only to the following language version(s):



Ping probe fails to start when the probe is installed and started by non-root user.


The following error is seen in the probe's log:

Error: E-P_P-002-038: Could not change euid: Operation not permitted
Error: E-P_P-002-017: IPv4 socket failed: specified action does not have access permission of the file
Error: E-P_P-002-037: This program can only be run by root, or it must be setuid root.


Ping probe needs permissions which allow it to run as root and the LIBPATH setting should be changed.



Resolving the problem

To enable non-root user to start the probe, you need to change the owner to root and permissions to setuid. And AIX ignores the LIBPATH setting when program runs as setuid root, so you also need to put either a copy of the required libraries, or a symbolic link to the required libraries in one of the trusted paths like /lib or /usr/lib.

1. Change the owner to root and permissions to setuid.
# cd $OMNIHOME/probes/aix5/
# chown root:root nco_p_ping
# chmod +s nco_p_poing

2. Put a symbolic link to the required libraries.
# cd /usr/lib

# ln -s /opt/IBM/netcool/platform/aix5/lib/libgsk*
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/libtre.a
# ln -s /opt/IBM/netcool/platform/aix5/lib/
# ln -s /opt/IBM/netcool/platform/aix5/lib/libicuuc40.a
# ln -s /opt/IBM/netcool/platform/aix5/lib/libicui18n40.a
# ln -s /opt/IBM/netcool/platform/aix5/lib/libicudata40.a

The required libraries can be seen by the following command:
# dump -H $NCHOME/omnibus/platform/aix5/nco_p_ping

If there are newer modules of the required libraries, it's better to create a symbolic link to the newer module.
# ln -s /opt/IBM/netcool/platform/aix5/lib/libicui18n40.1.a
rather than,
# ln -s /opt/IBM/netcool/platform/aix5/lib/libicui18n40.a

But, please note that it would be better to create the symbolic links again whenever after you apply Fix pack for OMNibus core.

Cross reference information
Segment Product Component Platform Version Edition
Systems and Asset Management Tivoli Netcool/OMNIbus Ping AIX All Versions

Document information

More support for: Tivoli Netcool/OMNIbus

Software version: All Versions

Operating system(s): AIX

Reference #: 1499280

Modified date: 12 May 2017

Translate this page: