The output from “pmlicense –uf” should provide a “Detailed Licensed Hosts Report” but sometimes does not record Sudo Policy or Sudo Keystroke activity on hosts.
In the pm.settings file the “offlinetimeout” setting sets the timeout in milliseconds before an off-line policy evaluation occurs on a Sudo Plugin host. ( A local sudo policy will be used instead of a central policy)
If this value is set to “offlinetimeout 0” this forces the cache service to always perform offline (local-only) policy evaluation for sudo requests.
The “Detailed Licensed Hosts Report” is not updated when the offline (local) policy evaluations are performed.
Use a central sudo policy by removing “offlinetimeout 0” from the pm.settings file.
Please note that this will increase network traffic and in some instances may cause a delay when running sudo commands.
© 2019 One Identity LLC. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책