Use an alternate privileged command for SSH Discovery - Support and Troubleshooting

Use an alternate privileged command for SSH Discovery Issue .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: block; max-width: ; width: auto; height: auto; } } If your organization's security policy does not allow the use of sudo , you can configure the MID Server to use an alternate privileged command during SSH discovery. Supported alternatives include:

dzdo pbrun pfexec sesudo  Release .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: block; max-width: ; width: auto; height: auto; } } All versions

Resolution .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: block; max-width: ; width: auto; height: auto; } }

Step 1. Configure the MID Server to use a specific privileged command Go to the list of MID Servers using any of these paths:

MID Server > Servers

Discovery > MID Servers

Orchestration > MID Servers

Select the MID Server to configure.

Open the More options menu in the header, then select View > Advanced.

In the Privileged Command related list, select Edit.

Choose the privileged command you want the MID Server to use and select Save.

Tip: The default command priority is 100. You can adjust the order value if needed. The command with the lowest order number is attempted first.

Step 2. Locate the file path of the alternate command on the target hosts By default, ServiceNow searches for the sudo command in the following directories:

/usr/sbin /usr/bin /bin /sbin Your alternate privileged command might be in a different location depending on the device class.

To determine the correct path:

On a representative device from each host class, run: command -v alternate_privileged_command

Note : You must include the word command

Example:

2. Note the directory returned. For example, /usr/seos/bin

3. Set the MID Server to use the alternate path You must define the correct path by adding the mid.ssh.path_override parameter to the MID Server configuration.

Available Value options:

Append – Adds the override path to the end of the host’s path (default behavior) Prepend – Adds the override path to the beginning of the host’s path Replace – Replaces the host path entirely with the override path None – No override Using the Append value, configure the path override following these steps:

Go to the list of MID Servers using one of the following paths: MID Server > Servers Discovery > MID Servers Orchestration > MID Servers Select the appropriate MID Server to configure. In the Configuration Parameters related list, select New . Enter the following values: MID Server: (auto-filled) Parameter name: mid.ssh.path_override Domain: global Value: Append:/usr/seos/bin (replace with your actual path) Note : Repeat this configuration for each MID Server that will use the alternate privileged command.

Related Links .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: block; max-width: ; width: auto; height: auto; } } MID Server privileged commands - Configure the MID Server to use specific privileged commands

MID Server Parameters - SSH Discovery parameters