Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Privilege Manager for Unix 6.1 Common Documents - Administration Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager programs Installation Packages

requestlocal

Description

Type integer READONLY

Indicates if the request is local. requestlocal is true if no request was made to run on a remote host using pmrun -h.

Example
# reject requests to run on a remote host 
if (requestLocal == false) 
   reject "remote requests are not allowed";

requestuser

Description

Type string READONLY

requestuser is initialized to the selected user name if you select the pmrun –u option. It is a request to set the runuser for the session to the selected user name. The administrator can decide whether to honor the request in the policy file. By default, this variable is set to the value of the user variable.

Example
if ((user in adminusers) && (requestuser in adminusers_allowed)) 
{ 
   runuser = requestuser; 
}

samaccount

Description

Type string READONLY

The user's sAMAccountName for the submit user if Authentication Services is configured and the client is able to determine the sAMAccountName. Otherwise this variable is set to an empty string.

Example
# reject if the user is not in the uxwheel AD group 
if (vas_user_is_member(samaccount, "uxwheel", domainname) == false) 
   reject "user is not in uxwheel group";
Related Topics

domainname

status

Description

Type integer READONLY

status contains the exit status of the most recent command run by the system function.

Example
Cprofile=system("find /home/custom_appl –name customprofile.txt"); 
if (status == 0) 
{ 
   welcome_msg=readfile(Cprofile); 
   print(welcome_msg); 
}
Documents connexes