This section describes the requirements to enable monitoring of an SGD deployment.
The plug-in supports the following versions of Oracle Enterprise Manager Cloud Control and Oracle Secure Global Desktop:
Before you install the plug-in, verify that your environment meets these requirements:
An Oracle Enterprise Manager installation must be running.
An Oracle Management Agent (Management Agent) must be installed on each SGD host that you want to monitor.
For Oracle Enterprise Manager Cloud Control system requirements and installation instructions, see the Oracle Enterprise Manager Cloud Control installation documentation.
To monitor an SGD array with the plug-in, the following user requirements apply:
On each SGD host, the Oracle Software Owner User must have an account and must be a member of the
ttaserv
UNIX group.The Oracle Software Owner User (typically,
oracle
) is required to install the Oracle Management Agent on the host. For details of the requirements for this user, see the Oracle Enterprise Manager Cloud Control installation documentation.The
ttaserv
group contains the SGD server system account users. Adding the Oracle Software Owner User to this group enables the Oracle Software Owner User to run tarantella commands.When you add the Oracle Software Owner User to the
ttaserv
group, ensure that you preserve any existing supplementary groups for this user.For example, if the Oracle software owner user is
oracle
:# usermod -G
group1
,group2
,ttaserv oraclewhere
group1
andgroup2
are the existing supplementary groups for theoracle
user.A single dedicated SGD Administrator must be available for use with the plug-in.
You enter the credentials for this user when you add the SGD host as a target in Oracle Enterprise Manager.
The user must be able to authenticate to SGD using any of the enabled SGD authentication mechanisms.
The user profile must be shareable. Ensure that the Login: Multiple (
--shared
) attribute is enabled for the user profile object.The user must be a member of the Enterprise Manager Agents role.
In the following example, the user profile object
sgd-agent-user
is added as a member of the Enterprise Manager Agents role.# tarantella role add_member \ --role "o=Tarantella System Objects/cn=Enterprise Manager Agents" \ --member "o=Example/cn=sgd-agent-user"
Verify that the SGD Administrator user can log in to SGD on each host, and that they can access the SGD Administration Console.
For more information on how to configure SGD Administrator accounts and roles, see the Oracle Secure Global Desktop Administration Guide.
To monitor an Oracle Secure Global Desktop target, an Oracle Enterprise Manager administrator must have PERFORM_OPERATION privileges for the target. See the Oracle Enterprise Manager Cloud Control documentation for more information on configuring privileges.