This subcommand displays on-screen help. If another subcommand is given as an argument, help for that subcommand will be displayed.
Syntax
help <subcommand>
In this example, the general help section will be displayed.
pmgit help
In this example, the help for enable subcommand will be displayed.
pmgit help enable
pmincludecheck [-v][-p <path>][-f][-o]
pmincludecheck is used by the pmsrvconfig script on the primary server only. When configuring a primary server in pmpolicy mode, if you do not have a policy file to import into the repository, then pmincludecheck initializes the policy from the current set of default policy files provided in the installation.
pmincludecheck has the following options.
| Option | Description |
|---|---|
|
-v |
Displays the version number of Privilege Manager for Unix and exits. |
|
-p <path> |
Sets policyDir to the specified path. |
|
-f |
Sets policyDir to the specified file. |
|
-o |
Forces rewrite of the current policy file, which archives and replaces the current policy file. |
Note that pminfo is obsolete in version 5.6 or higher and is included for backwards compatibility only.
pminfo -v | [ -s | -d | -r [ -m <master> ] ]
The pminfo program allows the local host to register with Privilege Manager for Unix. If your Privilege Manager for Unix policy server has a host license, this registration is mandatory; agents cannot communicate successfully with the policy server until registration is completed and the policy server has allocated a license slot for the agent.
During registration, information about the local host configuration is sent to the Privilege Manager for Unix policy server. This includes a list of the agent's IP addresses.
To view the information that will be sent to the Privilege Manager for Unix policy server, run pminfo with the -s option.
The pminfo program located on an agent identifies itself to the policy server using the agent's fully qualified host name and a unique registration data string.
If the host name or IP addresses of the agent are changed, then the agent must re-register with the policy server.
pminfo has the following options.
| Option | Description |
|---|---|
|
-d |
Unregisters the local host from Privilege Manager for Unix. |
|
-m <master> |
Specifies a single policy server host to register with. By default, pminfo attempts to register with all policy servers configured in etc/opt/quest/pm.settings. |
|
-r |
Registers the local host with Privilege Manager for Unix. |
|
-s |
Dumps the local host registration information to stdout. |
|
-v |
Displays the version number of Privilege Manager for Unix and exits. |
pmjoin -h | --help [-abitv] [-d <variable>=<value>] [<policy_server_host>]
[-bv] -u --unjoin [--accept] [--batch] [--define <variable>=<value>] [--interactive]
[--selinux] [--tunnel] [--verbose] <policy_server_host>
Use the pmjoin command to join a PM Agent to the specified policy server. When you join a policy server to a policy group, it enables that host to validate security privileges against a single common policy file located on the primary policy server, instead of on the host. You must run this configuration script after installing the PM Agent package to allow this agent to communicate with the servers in the group.
pmjoin has the following options.
| Option | Description |
|---|---|
| -a | --accept | Accepts the End User License Agreement (EULA), /opt/quest/qpm4u/pqm4u_eula.txt. |
| -b | --batch | Runs in batch mode, will not use colors or require user input under any circumstances. |
| -d <variable>=<value> | --define <variable>=<value> | Specifies a variable for the pm.settings file and its associated value. |
| -h | --help | Prints this help message. |
| -i | --interactive | Runs in interactive mode, prompting for configuration parameters instead of using the default values. |
|
-S | --selinux |
Enable support for SELinux in Privilege Manager for Unix. A SELinux policy module will be installed, which allows the pmlocal daemon to set the security context to that of the run user when executing commands. This requires that the policycoreutils package and either the selinux-policy-devel (RHEL7 and above) or selinux-policy (RHEL6 and below) packages be installed. |
| -t | --tunnel | Configures host to allow Privilege Manager for Unix connections through a firewall. |
| -u | --unjoin | Unconfigures a Privilege Manager for Unix agent. |
|
-v | --verbose |
Displays verbose output while configuring the host. |
See Joining PM Agent to a Privilege Manager for Unix policy server for usage examples.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
