IZ68476: SUDO NMAP ERROR

APAR status

• Closed as documentation error.

Error description

• The sensor StackScan doesn't work. 0 IP addresses stocked in the
  databases.
  The error message that we see in the log is:  Sorry, sudo has
  beeb
  configured to not allow root to run it.
  When we execute the command with the taddm user cmdbadm: sudo
  nmap -sP
  -n -oX - 130.12.14.80
  we have the result as it should.
  

Local fix

• To solve the issue, set a property
  com.ibm.cdb.discover.sensor.idd.stackscan.alwaysUseLocalAnchor
  to true, in the collation.properties
  

Problem summary

• Troubleshooting information is not provided for the Stack
  Scan sensor unable to run the sudo nmap command.
  

Problem conclusion

• The following changes will be made in the next release of the
  publications(Sensor Reference);
  
  
  Stack Scan sensor is unable to run the sudo nmap command
  
  Problem
  
  The Stack Scan sensor fails with the following error message:
  "Sorry, sudo has been configured to not allow root to run it."
  However, you can successfully run sudo nmap at a command line.
  
  Solution
  
  This problem occurs when the system is configured not to allow
  the root user to run the sudo command. To fix the problem, edit
  the collation.properties file and set the
  com.ibm.cdb.discover.sensor.idd.stackscan.alwaysUseLocalAnchor
  property to true. Then restart the TADDM server.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels