/etc/sudoers.d/scom

#-----------------------------------------------------------------------------------
#Example user configuration for Operations Manager agent
#Example assumes users named: scom-maint & scom-monit
#Replace usernames & corresponding /tmp/scx-<username> specification for your environment

#General requirements
Defaults:scom-maint !requiretty
Defaults:scom-monit !requiretty

#Agent maintenance

##Certificate signing
scom-maint ALL=(root) NOPASSWD: /bin/sh -c cp /tmp/scx-scom-maint/scx.pem /etc/opt/microsoft/scx/ssl/scx.pem; rm -rf /tmp/scx-scom-maint; /opt/microsoft/scx/bin/tools/scxadmin -restart
scom-maint ALL=(root) NOPASSWD: /bin/sh -c cat /etc/opt/microsoft/scx/ssl/scx.pem

##Install or upgrade
scom-maint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scom-maint/scx-1.[5-9].[0-9]-[0-9][0-9][0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --install; EC=$?; cd /tmp; rm -rf /tmp/scx-scom-maint; exit $EC
scom-maint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scom-maint/scx-1.[5-9].[0-9]-[0-9][0-9][0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --upgrade --force; EC=$?; cd /tmp; rm -rf /tmp/scx-scom-maint; exit $EC

##Uninstall
scom-maint ALL=(root) NOPASSWD: /bin/sh -c /opt/microsoft/scx/bin/uninstall

##Log file monitoring
scom-monit ALL=(root) NOPASSWD: /opt/microsoft/scx/bin/scxlogfilereader -p

##Apache monitoring
scom-monit ALL=(root) NOPASSWD: /opt/microsoft/apache-cimprov/bin/apache_config.sh

#End user configuration for Operations Manager agent
#-----------------------------------------------------------------------------------