Chat now with support
Chat with Support

Privilege Manager for Unix 7.2.3 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

Installing the InTrust Reporting Pack

To install the InTrust Reporting Pack

  1. Using an InTrust Administration account, log in to your InTrust server.
  2. Run the MSI file extracted in the previous section from Privilege_Manager_InTrust_<version>.zip
    # d:\temp\QPM4U.1.0.0.006.msi

    To use the MSI installer for the InTrust Reporting Pack, your InTrust Server must use the WindowsSQL Server 2005 as its back-end database.

  3. Follow the instructions in the on-screen Wizard.
  4. Using a web browser, navigate to your InTrust reports and verify that you now have an InTrust for Privilege Manager for Unix section, for example: 
    http://<Intrust Server>/Reports

Configuring the InTrust data collection

To install the InTrust data collection

  1. Using an InTrust Administration account, log in to your InTrust server.
  2. From the menu, navigate to: Configuration | Sites | Unix Network | Privilege Manager for Unix hosts.
  3. Right click, then select Properties.
  4. Select the Objects tab, click Add | Computer, then enter the name of your Privilege Manager for Unix policy server InTrust agent.
  5. Click Apply, then OK.
  6. From the menu, navigate to: Workflow | Tasks | Privilege Manager for Unix daily collection of events.
  7. Right click, then select Run.
  8. From the menu, navigate to: Workflow | Sessions and view the status of your running task which should complete within a couple of minutes, depending on the size of your InTrust event log.
  9. Verify that the task completes successfully without errors.

Viewing InTrust reports

To view InTrust reports

  1. Using a web browser, navigate to your InTrust reports and verify that you now have an InTrust for Privilege Manager for Unix section.

    http://<Intrust Server>/Reports

     

  2. Select the report type that you want to generate, based on the data currently held in InTrust.

Generating reports

InTrust provides all of its reporting services through the InTrust Knowledge Portal which is based on Microsoft SQL Server Reporting Services. This provides functionality to generate reports dynamically from the InTrust data store and display them though a simple browser based utility.

The Knowledge Portal allows you to create reports manually, however there are a number of pre-compiled reports that gather the following Privilege Manager for Unix event log data:

  • All events
  • Elevated privilege events
  • All events grouped result
  • Out of band events
  • Rejected events

The reports are provided in a .msi installer which installs and configures the required Knowledge Portal components. To view the reports, simply load the Knowledge Portal using Start | Programs | Quest Software | Quest InTrust Knowledge Portal | Quest InTrust Knowledge Portal, then select InTrust for Privilege Manager for Unix from the report list.

For more information, please refer to the InTrust for Active Directory documentation.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating