A request came down from my company's VP of IT to give a company called Forsythe Technology INC. a login to my CMS system with sudo command access. I was told by my boss, that they are a company that provides system monitoring and that the VP wanted ALL of our systems on their monitoring system, no exceptions. The second line of the e-mail requesting the login and sudo command access states: "Also please provide us with any documentation or diagrams that you may have for Avaya CMS so it can help us understand how the applications works." Which sent up red flags. My first thought was they can't be serious. I can't seem to find anything about them except for their web site. forsythe.com. I'm not to thrilled about the request since we are paying for a 24 hour maintenance contract with Avaya to monitor our system. Not know much about Linux commands I called Avaya to have them look at the request. The commands Forsythe summited are releatively harmless. Has anybody had any experience with the company?
Below is the list of access they are requesting:
We need the following access to the Avaya servers to be able to discover the needed information. Again we will not install any agents on the system, All our discoveries will be done agent less.
Also please provide us with any documentation or diagrams that you may have for Avaya CMS so it can help us understand how the applications works.
Incase SNMP access is not available we will be needing the following access using SSH credential.
SSH
Test tool – Putty
Usage (from the Probe manager) –
Download Putty utility.
Put in the IP address and connect.
Put in the authentication information and login to the server.
If the server connects fine it means that we can connect to the server using SSH and MAM can access the server via SSH too.
Note*** For certain objects to be discovered, sudo access may be required on the remote server.
Credentials recommended –
SSH account (with sudo permissions)
Detailed description –
Access to run the following commands (more or less) is needed from Putty using the username/password specified in the SSH Protocol –
ifconfig
lscfg
entstat
lanscan
netstat
uname
hostname
dmesg
psrinfo
model
echo
tail
adb
kmem
prtconf
lsattr
sysctl
cpuinfo
grep
/var/adm/syslog/syslog.log (access to this file)
free
ps
lslpp
pkg_info
swlist
cat /etc/passwd
The system administrator can setup a sudo account and set permissions to run these commands.
Below is the list of access they are requesting:
We need the following access to the Avaya servers to be able to discover the needed information. Again we will not install any agents on the system, All our discoveries will be done agent less.
Also please provide us with any documentation or diagrams that you may have for Avaya CMS so it can help us understand how the applications works.
Incase SNMP access is not available we will be needing the following access using SSH credential.
SSH
Test tool – Putty
Usage (from the Probe manager) –
Download Putty utility.
Put in the IP address and connect.
Put in the authentication information and login to the server.
If the server connects fine it means that we can connect to the server using SSH and MAM can access the server via SSH too.
Note*** For certain objects to be discovered, sudo access may be required on the remote server.
Credentials recommended –
SSH account (with sudo permissions)
Detailed description –
Access to run the following commands (more or less) is needed from Putty using the username/password specified in the SSH Protocol –
ifconfig
lscfg
entstat
lanscan
netstat
uname
hostname
dmesg
psrinfo
model
echo
tail
adb
kmem
prtconf
lsattr
sysctl
cpuinfo
grep
/var/adm/syslog/syslog.log (access to this file)
free
ps
lslpp
pkg_info
swlist
cat /etc/passwd
The system administrator can setup a sudo account and set permissions to run these commands.