Use the following commands to navigate the log file in interactive mode.
Table 78: Log file navigation shortcuts
| g |
Go to start of file. |
| G |
Go to end of file. |
| p |
Pause or resume replay in slide show mode. |
| q |
Quit the replay. |
| r |
Redraw the log file from start. |
| s |
Skip to next time marker. Allows you to see what happened each second. |
| t |
Display time of an action at any point in the log file. |
| u |
Undo your last action. |
| v |
Display all environment variables in use at the time the log file was created. |
| Space key |
Go to next position (usually a single character); that is, step forward through the log file. |
| Enter key |
Go to next line. |
| Backspace key |
Back up to last position; that is, step backwards through the log file. |
|
/<Regular Expression> Enter |
Search for a regular expression while in interactive mode. |
|
/Enter |
Repeat last search. |
Display the time of an action at any point in the log file with t, redraw the log file with r, and undo your last action with u.
You can also display all the environment variables which were in use at the time the log file was created using v. Use q or Q to quit pmreplay.
Type any key to continue replaying the I/O log.
Syntax
pmresolvehost -p|-v|[-h <hostname>] [-q][-s yes|no]
Description
The pmresolvehost command verifies the host name / IP resolution for the local host or for a selected host. If you do not supply arguments, pmresolvehost checks the local host name/IP resolution.
Options
pmresolvehost has the following options.
Table 79: Options: pmresolvehost
|
-h <hostname> |
Verifies the selected host name. |
|
-p |
Prints the fully qualified local host name. |
|
-q |
Runs in silent mode; displays no errors. |
|
-s |
Specifies whether to allow short names. |
|
-v |
Displays the Privilege Manager for Unix version. |
Syntax
pmrun -v | -z on|off[<pid>] [-b][-d][-n][-p] [-m <masterhost>] [-h <hostname>]
[-u <requestuser>] command [args]
Description
The pmrun command requests that an application is run in a controlled account. Simply add pmrun to the beginning of the command line. For example:
pmrun backup /usr dev/dat
pmrun checks the /etc/opt/quest/pm.settings file to determine which the policy server daemon to send the request. Once it has contacted a policy server daemon, it sends a request to the daemon to run the application specified. As with the ssh command, you can type ~^Z to suspend pmrun, or ~. to terminate it. You must enter these commands at the beginning of a new line.
Options
pmrun has the following options.
Table 80: Options: pmrun
| -b |
Allows the runcommand process to run in the background, permitting you to run other programs or commands from the same window. You can use the -b switch with any application process which does not require output that changes the tty mode. Because of this restriction, you can not use the -b switch with applications that require a password. |
| -d |
The -d option is required if the application you are running uses the nohup command. Include the -d parameter to ensure that the nohup command functions correctly. |
|
-h <hostname> |
Allows you to request a particular execution host to run the request. Enter -h <host> before the command you are requesting. |
|
-m <masterhost> |
Allows you to select the policy server host to contact, bypassing the usual selection methods. The specified host must be in the masters setting in the pm.settings file. |
| -n |
Redirects the input of pmrun to /dev/null. Use the -n option to avoid unfortunate interactions between pmrun and the shell which invokes it. For example, if you are running pmrun and start a pmrun in the background without redirecting its input away from the terminal, it will block even if no reads are posted by the remote command. |
| -p |
Puts pmrun into pipe mode, in which all interactions with the user's terminal are done without changing any of the terminal parameters. Normally, pmrun puts the terminal into raw mode, so that programs such as text editors, which require raw mode, can run properly under pmrun. Pipe mode is useful when you need to pipe several pmrun commands together. For example:
pmrun -p ls /etc/secure | pmrun -p dbadd listing |
|
-u <requestuser> |
Requests to run the command as the specified user. The policy server decides whether to honor this request. |
| -v |
Displays the Privilege Manager for Unix version number and exits. |
|
-z |
Enables or disables tracing for this program and optionally for a currently running process.
Refer to Enabling program-level tracing before using this option. |
Files
File containing Privilege Manager for Unix communication parameters, including the list of valid master hosts:
/etc/opt/quest/qpm4u/pm.settings
Description
Use pmscp in conjunction with scp to launch the remote scp -t and scp -f daemons by means of pmrun -h. This allows you to use Privilege Manager for Unix to launch the remote scp daemons.
pmscp provides an alternate encryption channel for the scp command leaving authentication requirements to your Privilege Manager for Unix policy. Either put /opt/quest/bin in your PATH or use the absolute path.
Examples
To copy files to the /tmp directory on remote host, as root run the following:
scp -S pmscp <filename> user@remotehost:/tmp
