Chat now with support
Chat with Support

Privilege Manager for Unix 7.2.3 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

pmgit Status

This subcommand displays information about the policy management settings.

Examples

This example shows how to display the current status of the Git policy management settings.

pmgit status

pmgit Help

This subcommand displays on-screen help. If another subcommand is given as an argument, help for that subcommand will be displayed.

Syntax

help <subcommand>
Examples

In this example, the general help section will be displayed.

pmgit help
Examples

In this example, the help for enable subcommand will be displayed.

pmgit help enable
enable

pmincludecheck

Syntax
pmincludecheck [-v][-p <path>][-f][-o]
Description

pmincludecheck is used by the pmsrvconfig script on the primary server only. When configuring a primary server in pmpolicy mode, if you do not have a policy file to import into the repository, then pmincludecheck initializes the policy from the current set of default policy files provided in the installation.

Options

pmincludecheck has the following options.

Table 57: Options: pmincludecheck
Option Description

-v

Displays the version number of Privilege Manager for Unix and exits.

-p <path>

Sets policyDir to the specified path.

-f

Sets policyDir to the specified file.

-o

Forces rewrite of the current policy file, which archives and replaces the current policy file.

pminfo

Note that pminfo is obsolete in version 5.6 or higher and is included for backwards compatibility only.

Syntax
pminfo -v | [ -s | -d | -r [ -m <master> ] ]
Description

The pminfo program allows the local host to register with Privilege Manager for Unix. If your Privilege Manager for Unix policy server has a host license, this registration is mandatory; agents cannot communicate successfully with the policy server until registration is completed and the policy server has allocated a license slot for the agent.

During registration, information about the local host configuration is sent to the Privilege Manager for Unix policy server. This includes a list of the agent's IP addresses.

To view the information that will be sent to the Privilege Manager for Unix policy server, run pminfo with the -s option.

The pminfo program located on an agent identifies itself to the policy server using the agent's fully qualified host name and a unique registration data string.

If the host name or IP addresses of the agent are changed, then the agent must re-register with the policy server.

Options

pminfo has the following options.

Table 58: Options: pminfo
Option Description

-d

Unregisters the local host from Privilege Manager for Unix.

-m <master>

Specifies a single policy server host to register with. By default, pminfo attempts to register with all policy servers configured in etc/opt/quest/pm.settings.

-r

Registers the local host with Privilege Manager for Unix.

-s

Dumps the local host registration information to stdout.

-v

Displays the version number of Privilege Manager for Unix and exits.

Files
  • Privilege Manager for Unix configuration file: /etc/opt/quest/qpm4u/policy/pm.conf
  • Privilege Manager for Unix communication parameters: /etc/opt/quest/qpm4u/pm.settings
Related Topics

pmlicense

pmmasterd

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating