The MCU runs pmsrvinfo. On Privilege Manager for Sudo the permissions are not set for the MCU to run this as a non root user.
Product Defect ID: 186531 to be fixed in an future release.
1) Remove the Policy Server from the MCU. Under Hosts -> Host -> Remove Host
2) On the Policy Server find the actual pmsrvinfo binary that is running, it's a symlink:
ls -l ls -l /opt/quest/sbin/pmsrvinfo
lrwxrwxrwx. 1 root root 37 Jul 6 13:52 /opt/quest/sbin/pmsrvinfo -> /opt/quest/sbin/qpm4u_610_0/pmsrvinfo
In this example for this version this is the file we want to change the permission on: /opt/quest/sbin/qpm4u_610_0/pmsrvinfo
3) Set the new permissions:
chmod 4755 /opt/quest/sbin/qpm4u_610_0/pmsrvinfo
4) In the MCU add back the policy server and profile it.
5) Check System Settings - Privilege Manger - Policy Groups to confirm the Policy Groups are now visable and if so that they can be edited.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center