To restrict the pgdba user from host level login privileges for Linux, complete the following steps in the maintenance window:

Procedure

  1. Log in to the NCM Application server hosts, as the root user.
  2. Run the following command on the Application Server hosts:
    source /etc/voyence.conf
  3. Stop all NCM services on the Application Server host, by running the following command:
    systemctl stop vcmaster
  4. If the NCM Database server is remote, run the following commands on the server, as the root user:
    source /etc/voyence.conf
    systemctl stop controldb
  5. Run the following commands on the NCM Database server:
    1. Run the following command in the Linux shell on the host where the controldb resides to back up appropriate files:

      cp -p $VOYENCE_HOME/db/controldb/scripts/controldb.init /tmp/_[etc-init.d-]controldb.bak

    2. Update the pgdba user shell permissions, and then update the NCM controldb initialization script, to allow the correct controldb operation under a pdgba user with restricted shell privileges:

      sed -i 's/su - pgdba -c/su - pgdba -s \/bin\/bash -c/g' $VOYENCE_HOME/db/controldb/scripts/controldb.init

      cp -p /etc/passwd /tmp/passwd.bak

      usermod -s /sbin/nologin pgdba

    3. Restart the system:

      reboot

  6. If the NCM Database server is remote, start all the NCM services on the Application server host, by running the following command:
    systemctl start vcmaster