Return
-
Title
Privilege Manager for sudo failing after upgrading to Solaris 11.4 -
Description
Since upgrading to Solaris 11.4 Priviledge Manager for Sudo no longer works:$ sudo su -sudo: error in /etc/sudo.conf, line 4 while loading plugin "privilege_manager_policy_plugin"sudo: unable to load /opt/quest/libexec/qpm4u_plugin.so: ld.so.1: sudo: /opt/quest/libexec/qpm4u_plugin.so: wrong ELF class: ELFCLASS32sudo: fatal error, unable to load pluginsTried rejoining, but that also fails:# /opt/quest/sbin/pmjoin_plugin pmpolicysrv01********************************************************************************Quest Privilege Manager for Sudo (plugin) Version 600(050)*********************************************************************************** Detecting current Privilege Manager settings... [ OK]*** Checking for SMF [ OK]*** Locating services file... [ OK]*** Checking for sudo 1.8.1 or greater [FAIL]- ERROR: Architecture mismatch, /usr/ccs/bin/sudo is ELF64, plugin is ELF32, did you install the wrong plugin package?- ERROR: Configuration of qpm4u unsuccessful.- ERROR: Installation log file is /opt/quest/qpm4u/install/pmjoin_plugin_output_20200122.log -
Cause
In Solaris 11.4 the system binaries changed from 32 bit to 64 bit. A newer version of Privilege Manager is needed to provide support for the 64 bit binaries. -
Resolution
Upgrading to Privilege Manager 6.1 resolved the issue.
After upgrading the /etc/sudo.conf file needs to be updated with the path to the 64 bit version of the plugin instead of the 32 bit version. This can be done manually, or the sudo .conf file can be removed and Privilege Manager rejoined to create a new configuration file.