Chat now with support
지원 담당자와 채팅

Privilege Manager for Sudo 6.1 Common Documents - Administration Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration Upgrade Privilege Manager for Sudo System Administration Managing Security Policy Administering Log and Keystroke Files Troubleshooting Privilege Manager Variables Privilege Manager programs Installation Packages Unsupported Sudo Options Privilege Manager for Sudo Policy Evaluation

pmsum

Syntax
pmsum /<full_path_name>
Description

Use pmsum to generate a checksum of the named file. The output it produces can be used in a policy with the runcksum variable. If the requested binary/command does not match the checksum, it rejects the command.

Options

pmsum has the following options.

Table 45: Options: pmsum
Option Description
-v Prints the version number of Privilege Manager and exits.
Examples
# pmsum /bin/ls 
5591e026 /bin/ls

pmsysid

Syntax
pmsysid [-i] | -v
Description

The pmsysid command displays the Privilege Manager system ID.

Options

pmsysid has the following options.

Table 46: Options: pmsysid
Option Description
-i Shows the system host name and IP address.
-v Displays the Privilege Manager version and exits.

Installation Packages

Privilege Manager is comprised of the following packages:

  • Privilege Manager for Unix product

    Contains the Privilege Manager Policy Server and PM Agent components and uses the native packaging system for each platform (RPM, PKG, etc).

  • Privilege Manager for Sudo product

    Contains the Privilege Manager Policy Server and Sudo Plugin components and uses the native packaging system for each platform (RPM, PKG, etc).

  • Preflight Binary

    This is a stand-alone native binary for each platform (not zipped, tarred or packaged). This binary exists stand-alone on the ISO to make it available for use prior to installing software. It does not change any Privilege Manager configuration on the host.

For more information, see Download Privilege Manager for Sudo software packages.

Package locations

Privilege Manager is provided in native platform install packages, which include binary files, online man pages, installation files, and configuration file examples.

The install packages are located in the zip archive in two directories called:

  • /server
  • /agent
  • /sudo_plugin

where <platform> is the name of the platform on which you are running Privilege Manager.

There are three different packages:

  • qpm-agent package, which contains only the client (pmrun) and agent (pmlocald) components for Privilege Manager for Unix.
  • qpm-server package, which contains the server (pmmasterd), the client (pmrun) and agent (pmlocald), and the Sudo Plugin (qpm4u_plugin.so) components for Privilege Manager.
  • qpm-plugin package, which contains the offline policy cache server (pmmasterd), the Sudo Plugin (qpm4u_plugin.so) components for Privilege Manager

NOTE: The Solaris server and agent packages have filenames that start with QSFTpmsrv and QSFTpmagt, respectively.

Once installed, the packaged files are placed in an installation directory under /opt/quest which contains subdirectories and files.

The platform directories contain the Privilege Manager installer packages for each platform supported by Privilege Manager.

Table 47: Privilege Manager kit directories
Platform Architecture
aix52-rs6k IBM® AIX 5.3, 6.1

aix71-rs6k

IBM® AIX 7.1

freebsd-x86_64

FreeBSD on x86 64-bit architecture

hpux-hppa11 HP-UX 11.31 PA-RISC architecture
hpux11-ia64 HP-UX 11.31 Itanium architecture

linux-aarch64

Linux on ARM 64-bit architecture

linux-ia64

Linux on Itanium architecture

linux-intel Linux x86
linux-ppc64 Linux on ppc little endian 64-bit architecture

linux-ppc64le

Linux on ppc little endian 64-bit architecture

linux-s390 Linux s390
linux-x86_64 Linux on x86 64-bit architecture

macos-x86_64

macOS on x86 64-bit architecture

Solaris-intel Solaris Intel architecture
Solaris-SPARC® Solaris SPARC® architecture
관련 문서