How to force Privilege Manager communications to bind to a specific IP Address (4291072)

This article describes how to bind Privilege Manager communications to a single IP Address when multiple network interface cards (NICs) are configured
 

STATUS:

Enhancement request is now available in Privilege Manager for Unix Version 5.5.2 (042) and up

RESOLUTION:

The "thishost" setting in the pm.settings file can now be used to bind client request's to a specific hostname or IP address. If "thishost _" is used, requests will bind to the IP address of the client's "uname -n" hostname.

For client hosts with multiple network interfaces, this will result in static values for the submithostip and submithost variable's when requests are received on the master

1 - Edit the /etc/opt/quest/qpm4u/pm.settings file and add one of the three examples below.

 Replace the data and < > with relevant data for your environment.

EXAMPLE 1: (specifying a hostname)
  thishost <myhostname.example.com>

EXAMPLE 2: (specifying an IP address)
  thishost <10.0.0.27>

EXAMPLE 3: (generic form)
  thishost _

In Privilege Manager for Sudo, If the pm.settings file does not exist, pmjoin_plugin will create it.   You can either create the pm.settings file and put the thishost setting as the only entry, or you can run use the -d option to pmjoin_plugin to set the setting: