Re: Calling correction action to run from a common server instead of target host through OEM 12c

From: Freek D'Hooge <freek.dhooge_at_gmail.com>
Date: Wed, 06 Apr 2016 09:44:42 +0200
Message-ID: <1459928682.3744.8.camel_at_dhoogfr-lpt1>



Hi,

I know that this is not a direct answer to your question, but why don't you use the that common server to "correct" the passwords on the other servers?
Should not be very difficult to create a script that checks the /etc/passwd to check for known application users and set the password (you can pass the new, encrypted, password using "usermod -p ").

Alternatively you could use the common server to setup ssh equivalence between the other servers and the OMS.
(but I would say that no one knowing the application passwords is a bigger problem than just for the OEM corrective actions...)

Kind regards,

-- 
Freek D'Hooge
Exitas NV
Senior Oracle DBA
email: freek.dhooge_at_exitas.be
tel +32(03) 443 12 38
http://www.exitas.be 


On wo, 2016-04-06 at 06:27 +0000, Tiwari, Yogesh wrote:

> Hi,
>
>
>
> Setup: 12.1.0.4.0 OEM
>
>
>
> Is there a way we can configure OEM to run corrective action from a
> different server than target host, where issue has occurred?
>
>
>
> Currently, our setup has an OS credential set to login onto target
> server and then run a OS script as correction action. However, since
> we huge setup OS credentials don’t work on all servers. It shall be
> very tedious to fix each of them manually. Moreover, nobody
> remembers(duhh!!) actual OS credentials either, nor unix team has any
> across estate password reset functionality setup.
>
>
>
> We have a common server, which has ssh enabled across estate. Hence,
> we want OEM to run goto that server instead and call a wrapper script,
> which shall ssh to target host and run corrective action.
>
>
>
> I cant seem to find anything in documentation around this. Any lead
> shall help.
>
>
>
> Thanks,
>
> Yogi
>
>
>
> Disclaimer: The information transmitted is intended for the person or
> entity to which it is addressed and may contain confidential,
> privileged or copyrighted material or attorney work product. If you
> receive this in error, please contact the sender and delete the
> material from any computer. Any comments or statements made are not
> necessarily those of FIL India Business Services Private Limited or
> any other Fidelity entity. All e-mails may be monitored or recorded.
>
>
>
>
-- http://www.freelists.org/webpage/oracle-l
Received on Wed Apr 06 2016 - 09:44:42 CEST

Original text of this message