Converse agora com nosso suporte
Chat com o suporte

Privilege Manager for Unix 7.2.3 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

pmclientd

Syntax
pmclientd [-v]i|[-z on|off[:<pid>]]
Description

The pmclientd daemon runs on an agent and allows the agent to respond to remote requests sent by a policy server as a result of calling a remote function from the policy file. It is not required on a policy server, as the pmmasterd daemon can serve these requests, if received from another policy server. pmclientd listens on the configured policy server port and responds to a remote request received from any valid policy server or any host listed in the clients setting in pm.settings.

Options

pmclientd has the following options.

Table 52: Options: pmclientd
Option Description
-v Displays the version number of Privilege Manager for Unix and exits.

-z

Enables or disables debug tracing, and optionally sends SIGHUP to running process.

Refer to Enabling program-level tracing before using this option.

pmclientinfo

Syntax
pmclientinfo -v | [-z on|off[:<pid>]]] | -c [-h <host>]
Description

The pmclientinfo utility displays configuration information about a client host. This utility provides some information about the policy server group and the license features supported by the policy server group. You can specify a host on the command line to retrieve the details from a specific policy server host. Otherwise, the utility checks each policy server listed in the pm.settings file in turn until it finds one in a policy server group. Any user can run pmclientinfo.

Options

pmclientinfo has the following options.

Table 53: Options: pmclientinfo
Option Description
-c Displays CSV, rather than human-readable output.
-h <host> Specifies policy server host name to interrogate for policy group information.
-v Displays the version number of Privilege Manager for Unix and exits.

-z

Enables or disables debug tracing.

Refer to Enabling program-level tracing before using this option.

Examples

Any user on the host can run this utility. It displays the following information, in human readable or CSV format:

- Joined to a policy group                                    : YES 
- Policy group name configured for this policy server group   : adminGroup1 
- Primary policy server hostname                              : adminhost1

Human Readable output from a client:

- Joined to a policy group                                    : YES 
- Name of policy group                                        : adminGroup1 
- Hostname of primary policy server : adminhost1.example.com

CSV output from a client:

PMCLIENTINFO.JOINED,Joined to a policy group,YES 
PMCLIENTINFO.POLICYGROUPNAME,Name of policy group,adminGroup1 
PMCLIENTINFO.PRIMARYPOLICYSERVER,Hostname of primary policy server,adminhost1.example.com
Files
  • Settings file: /etc/opt/quest/qpm4u/pm.settings
Related Topics

pmjoin

pmcp

Syntax
pmcp [-v]|[-z on|off[:<pid>]] [-m <masterhost>] file1 rhost:file2
Description

Use pmcp to copy a file from one host to another. The pmcp command allows you to select the policy server host to contact, bypassing the usual selection methods. The specified host must be present in the masters setting in the pm.settings file. This functionality is the same as using pmrun [-m masterhost].

You can use the following policy variables with pmcp:

Table 54: Policy variables: pmcp
Variable Description
filesize Specifies the size of the source file.
filename Specifies the name of the source file, including the full path.
filedest Specifies the name of the target file, including the full path.
fileuser Specifies the user name associated with the source file UID.
filegroup Specifies the group name associated with the source file GID.

filedate

Specifies the date that the source file was last modified. This returns a string in the form: YYYY/MM/DD.

Options

pmcp has the following options.

Table 55: Options: pmcp
Option Description

-m <masterhost>

 Selects a policy server host to contact.
-v Displays product version information.

-z

Enables or disables debug tracing, and optionally sends SIGHUP to running process.

Refer to Enabling program-level tracing before using this option.

pmcsh

Syntax
pmcsh
Description

The Privilege Manager for Unix C Shell (pmcsh) command starts a C shell, an interactive command interpreter and a command programming language that uses syntax similar to the C programming language. The C shell carries out commands either interactively from a terminal keyboard or from a file. pmcsh is a fully featured version of csh, that provides transparent authorization and auditing for all commands submitted during the shell session. All standard options for csh are supported by pmcsh.

To see details of the options and the shell built-in commands supported by pmcsh, run pmcsh -?

Using the appropriate policy file variables, you can configure each command entered during a shell session, to be:

  • forbidden by the shell without further authorization to the policy server
  • allowed by the shell without further authorization to the policy server
  • presented to the policy server for authorization

Once allowed by the shell, or authorized by the policy server, all commands run locally as the user running the shell program.

Options

pmcsh has the following options.

Table 56: Options: pmcsh
Option Description
-b <file> Runs in batch mode. Reads and runs commands from specified file.
-B Allows the shell to run in the background.
-c <command> Runs specified command from next argument.
-d Loads directory stack from ~/.cshdirs.
-Dname[=value] Defines environment variable name as specified value (DomainOS only).
-e Exits on any error.
-f Starts faster by ignoring the start-up file.
-F Uses fork() instead of vfork() when spawning (ConvexOS only).
-i Runs in interactive mode, even when input is not from a terminal.
-l Acts as a login shell, must be the only option specified.
-m Loads the start-up file, whether or not owned by effective user.
-n <file> Runs in no execute mode, just checks syntax of the specified file.
-q Accepts SIGQUIT for running under a debugger.
-s Reads commands from standard input.
-t Reads one line from standard input.
-v Echos commands after history substitution.
-V Like -v but including commands read from the start up file.
-x Echos commands immediately before execution.
-X Like -x but including commands read from the start up file.
--help | ? Prints this message and exits.

--version

Prints the version shell variable and exits.

pmcsh supports the following built-in functions:

:, @, alias, alloc, bg, bindkey, break, breaksw, builtins, case, cd, chdir, complete, continue, default, dirs, echo, echotc, else, end, endif, endsw, eval, exec, exit, fg, filetest, foreach, glob, goto, hashstat, history, hup, if, jobs, kill, limit, log, login, logout, ls-F, nice, nohup, notify, onintr, popd, printenv, pushd, rehash, repeat, sched, set, setenv, settc, setty, shift, source, stop, suspend, switch, telltc, termname, time, umask, unalias, uncomplete, unhash, unlimit, unset, unsetenv, wait, where, which, while

Documentos relacionados

The document was helpful.

Selecione a classificação

I easily found the information I needed.

Selecione a classificação