-
タイトル
sshKeyTypes and auditsrv* lines were added to the pm.settings after the upgrade -
説明
sshKeyTypes and auditsrv* lines were added to the pm.settings after the upgrade.
-
対策
After updating to 7.1, the following lines will be added to /etc/opt/quest/qmp4u/pm.settings:
sshKeyTypes rsa ecdsa
auditsrvEnabled NO
auditsrvEnforced NO
auditsrvLocaliologs NO
auditsrvTLS YES
auditsrvTLSVerify YES
auditsrvTLSCheckpeer YES
auditsrvTimeout 30
auditsrvKeepalive NO
auditsrvLogdir /var/opt/quest/qpm4u/auditserver
auditsrvPSpaceMB 100These new settings were introduced in version 7.0.
The sshKeyTypes setting allows other ssh key types to be used for Privilege Manager internal communications. Previously, only rsa keys were allowed.
The autidsrv* settings will allow the configuration to send event and i/o logs to an audit server using the Sudo Log Server protocol, instead of logging to files on the policy server. These settings only pertain to the policy servers and are not enabled by default so that the traditional logging is used.