Is it possible to use the pmrun feature on a remote system that belongs to another policy server? (4249622)

Is it possible to use the pmrun feature on a remote system that belongs to another policy server?

Is it possible to use the "pmrun -h <hostname>" feature to run a command on a remote host that does not belong to the submit host policy server?

Server A Belongs to Policy A
Server B Belongs to Policy B

Is it possible to submit a command from Server B and run on Server A.

Cross-policy group requests are possible in 6.0, but only under specific conditions:

* requests need to be submitted from a policy server
* policy server requires special configuration to allow submission to other policy group
* requests need to be sent (via -m option) to a policy server belonging to the same policy group as the execution host

agentA and masterA belong to policy group A (masterA is a policy server for groupA)
agentB and masterB belong to policy group B (masterB is a policy server for groupB)
Configure policy server on masterB with 'pmsrvconfig -m pmpolicy -d selecthostrandom=NO -d masters="masterB masterA" -a'

On masterB, to submit a request a command be executed on agentA:

pmrun -m masterA -h agentA <command>


cross-policy group requests can also be sent from agent hosts, but the agents also must have special configuration to include policy servers from the other policy group.

e.g. on agentA: pmjoin -a -d selecthostrandom=no -d masters="masterA masterB" masterA

Please note that the masters list not only specifies which policy servers the client may send requests to (pmrun -m), but also specifies the policy servers that can tell the agent to execute a command (pmrun -h). By adding masterB to agentA's master list, you are essentially allowing policy group B to send commands to agentA for execution.

Care should be taken to consider if this is really what is required before making changes to the masters list.