Use an alternate privileged command for SSH Discovery - Support and Troubleshooting

Use an alternate privileged command for SSH Discovery Issue

Description Here are the steps to use an alternate privileged SSH command for discovery if your company security guidelines do not allow the use of sudo . The other supported privileged commands are dzdo , pbrun , pfexec and sesudo .

Procedure Configure the MID Server to use specific privileged commands 1. Navigate to the list of MID Servers using one of the following paths:

-MID Server > Servers

-Discovery > MID Servers

-Orchestration > MID Servers

2. Select the MID Server you want to configure.

3. Click the menu icon in the header bar and select View > Advanced from the context menu.

4. In the Privileged Command related list, click Edit .

5. Select the command you want this MID Server to use and click Save .

-The default order of privileged commands is 100, but you can change the order as necessary. The privileged command with the smallest order number is tried first. Find the file location of the alternate privileged command for hosts you wish to discover By default ServiceNow looks in the following location for the sudo command: /usr/sbin /usr/bin /bin /sbin

Your alternate privileged command may be located in a different directory on your hosts, and this may also vary by device class. To determine this location follow the steps below:

1. Run this command on one device from each class you would like to discover:

command -v alternate_privileged_command Note: You must include the word command

Example:

2. Notate the path that the command itself is located in:

Using the above example: /usr/seos/bin

Set the MID server to use the correct path for your alternate privileged command You must add the mid.ssh.path_override parameter to your MID server for it to use the correct path for this alternate command.

There are 4 Value options available:

Append : Appends the override path to the end of the host's path. This is the default behavior. Replace : Replaces the host path with the path_overide value. Prepend : Appends the override path to the front of the host path. Default value : None

Using the above example path we will use these steps to Append the path location:

1. Navigate to the list of MID Servers using one of the following paths:

-MID Server > Servers

-Discovery > MID Servers

-Orchestration > MID Servers

2. Select the MID Server you want to configure.

3. Configuration Parameters > New

MID Server: Auto-populated

Parameter name: mid.ssh.Path_override

Domain: global

Value: Append:/usr/seos/bin

Note: Make sure to repeat this process on all MID servers that will be using this alternate privileged command

Applicable Versions All versions

Additional Information MID Server privileged commands - Configure the MID Server to use specific privileged commands

MID Server Parameters - SSH Discovery parameters