지금 지원 담당자와 채팅
지원 담당자와 채팅

Privilege Manager for Unix 7.3 - Release Notes

Resolved issues

The following is a list of issues addressed in this release.

Table 2: Resolved Issues
Resolved Issue Issue ID

Fixed an issue where the pmlogsrvd service on a policy server would attempt to process a duplicate event indefinitely.

Duplicate events are now discarded instead of being retried. If two different events have the same UUID, the second event is assigned a new UUID.

439903

On newer Linux distributions, such as RHEL 9.2, the qpm packages required installing the libxcrypt-compat package to work.

This dependency is not required anymore.

443055

On macOS ARM64, packages do not require Rosetta 2 to be installed anymore.

453156

Supported platforms

The following table provides a list of supported platforms for Privilege Manager for Unix clients.

CAUTION: As of Privilege Manager for Unix version 7.3, the following platforms and architectures are no longer supported:

  • CentOS Linux 6

  • Apple MacOS 11.3

  • Oracle Enterprise Linux (OEL) 6

  • Red Hat Enterprise Linux (RHEL) 6

Table 3: Linux supported platforms — server and client

Platform

Version

Architecture

Alma Linux

8, 9

x86_64, AARCH64, PPC64le, s390x

Amazon Linux

AMI, 2, AL2022

x86_64

CentOS Linux

7, 8, 9

Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64

CentOS Stream

8, 9

x86_64, AARCH64, PPC64le, s390x

Debian

Current supported releases

x86_64, x86, AARCH64

Fedora Linux

Current supported releases

x86_64, x86, AARCH64

OpenSuSE

Current supported releases

x86_64, x86, AARCH64

Oracle Enterprise Linux (OEL)

7, 8, 9

Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64

Red Hat Enterprise Linux (RHEL)

7, 8, 9

Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64

Rocky Linux

8, 9

x86_64, AARCH64, PPC64le, s390x

SuSE Linux Enterprise Server (SLES)/Workstation

12, 15

Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64

Ubuntu

Current supported releases

x86_64, x86, AARCH64

Table 4: Unix and Mac supported platforms — client

Platform

Version

Architecture

Apple MacOS

12.0 and above

x86_64, ARM64

FreeBSD

12.x, 13.x, 14.x

x32, x64

HP-UX

11.31

IA-64

IBM AIX

6.1 TL9, 7.1 TL3, TL4, TL5, 7.2, 7.3

Power 4+

Oracle Solaris

10 8/11 (Update 10), 11.x

SPARC, x64

System requirements

Before installing Privilege Manager for Unix 7.3, ensure that your system meets the following minimum hardware and software requirements.

NOTE: Beginning with version 7.3, Privilege Manager for Unix supports only Linux-based systems for Privilege Manager for Unix policy servers.

Table 5: Hardware and software requirements
Component Requirements

Operating systems

To review a list of platforms that support Privilege Manager for Unix clients, see Supported platforms.

Disk space

80 MB of disk space for program binaries and manuals for each architecture.

Considerations:

  • At a minimum, you must have 80 MB of free disk space. The directories in which the binaries are installed must have sufficient disk space available on a local disk drive rather than a network drive. Before you install Privilege Manager for Unix, ensure that the partitions that will contain /opt/quest have sufficient space available.
  • Sufficient space for the keystroke logs, application logs, and event logs. The size of this space depends on the number of servers, the number of commands, and the number of policies configured.

  • The space can be on a network disk drive rather than a local drive.

  • The server hosting Privilege Manager for Unix must be a separate machine dedicated to running the pmmasterd daemon.

SSH software

You must install and configure SSH client and server software on all policy server hosts.

You must enable access to SSH as the root user on the policy server hosts during configuration of the policy servers. Both OpenSSH 4.3 (and later) and Tectia SSH 6.4 (and later) are supported.

Processor

Policy Servers: 4 cores

RAM

Policy Servers: 8GB

Upgrade and compatibility

Privilege Manager for Unix supports a direct upgrade installation from version 6.0 and higher. The Privilege Manager for Unix software in this release is provided using platform-specific installation packages. For more information on upgrading, see the One Identity Privilege Manager for Unix Administration Guide.

One Identity recommends that:

  • You upgrade your policy server (Master) systems before agents, and that a policy server is run at the same or higher level than agents.

  • All policy server systems and agents are upgraded to the latest version to take advantage of all new features.

The upgrade process will create symbolic links to ensure that your existing paths function correctly.

Use of the Privilege Manager for Unix clients (pmrun and pmshells) with a policy server in Sudo policy mode is not supported.

Product licensing

Although licenses are allocated on a per-agent basis, you install licenses on Privilege Manager for Unix policy servers.

No special commands are required to register or license the clients with policy servers. Hosts using the Privilege Manager for Unix agents are automatically granted a license once a request is received on the Privilege Manager for Unix policy server by means of the pmrun command.

To install a license file

  1. Copy the .dlv license file to the policy server.
  2. To install the license, run:

    # /opt/quest/sbin/pmlicense -l <license_file>

    This command displays your currently installed license and the details of the new license to be installed.

  3. When the prompt "Would you like to install the new license (Y/N) [Y]?" appears, press Enter, or type: Y.

  4. If there are other policy servers configured in your policy server group, it forwards the license configuration to the other servers.

See the Privilege Manager for Unix Administration Guide for more information about the syntax and usage of the pmlicense command.

관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택