Chat now with support
Chat with Support

Safeguard for Sudo 2.0 - Administrators Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration
Download Privilege Manager for Unix Software Packages Download Privilege Manager for Sudo Software Packages Quick Start and Evaluation Configure a Primary Policy Server Configure a Secondary Policy Server Install PM Agent or Sudo Plugin on a Remote Host Remove Configurations
Upgrading Privilege Manager System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager Programs Installation Packages Unsupported Sudo Options Sudo Plugin Policy Evaluation About us

Miscellaneous Functions

Privilege Manager for Unix Built-in Functions and Procedures > Miscellaneous Functions

These are the built-in miscellaneous functions available to use within the policy file:

Table 42: Miscellaneous functions
Name Description
atoi Translate a string representation of an integer to an integer.
authenticate_pam Authenticate a user on the primary policy server.
authenticate_pam_toclient Authenticate a user on the client.
basename Return the filename portion of a path.
comparehosts Check whether a host string matches a host definition.
datecmp Compare two date strings.
dirname Return the directory name portion of a path
feature_enabled Determine whether a feature is supported on the policy server
fileexists Check whether a file exists on the policy server.
glob Match a string to a pattern.
ingroup Check whether a host is in the specified UNIX® group on the policy server.
innetgroup Check whether a user is in the specified NIS netgroup on the policy server.
innetuser Check whether a user is in the NIS netgroup.
lineno Return the current line number in the policy file.
mktemp Create a temporary file. Same as mktemp system.
osname Return a string representation of the operating system.
quote Quote a string.
rand Generate a random number.
stat Obtain information about a file on the policy server.
strftime Format the current date/time as a string.
system Run a program on the policy server.
timebetween Check whether a given time is between two times.
tolower Convert string to lower case.
toupper Convert string to upper case.
uname Return system information on the policy server; output of uname system command line.

atoi

Privilege Manager for Unix Built-in Functions and Procedures > Miscellaneous Functions > atoi
Syntax
int atoi ( string nptr )
Description

atoi converts the string representation of a decimal integer to an integer. If the string does not contain a number, it produces a syntax error and rejects the session.

This function returns the converted integer.

Example
x=atoi("123"); 
printf("%d\n", x);

Returns: 123

Related Topics

insert

join

authenticate_pam

Privilege Manager for Unix Built-in Functions and Procedures > Miscellaneous Functions > authenticate_pam
Syntax
int authenticate_pam ( string user [, string service] )
Description

The authenticate_pam function authenticates a user by means of the PAM (Pluggable Authentication Method) or SIA (Security Integration Architecture) APIs on the policy servers.

NOTE: This function is only available on platforms that have native support for PAM or SIA. For more information on how to configure PAM or SIA, consult the documentation for your platform.

The service parameter identifies the name of the PAM service to use to authenticate the user. This can be any valid service name configured in the PAM/SIA system configuration. It defaults to the PAM service "login".

This function returns 0 to indicate failure and 1 to indicate success.

Example
if (user=="paul" && basename(command)=="useradd") 
{ 
   if (!authenticate_pam(user, "sshd")) 
   { 
      reject; 
   } 
   runuser="root"; 
   accept; 
}
Related Topics

authenticate_pam_toclient

Utilizing PAM Authentication

authenticate_pam_toclient

Privilege Manager for Unix Built-in Functions and Procedures > Miscellaneous Functions > authenticate_pam_toclient
Syntax
int authenticate_pam_toclient ( string user [, string service] )
Description

The authenticate_pam_toclient function authenticates a user by means of the PAM (Pluggable Authentication Method) or SIA (Security Integration Architecture) APIs on the policy server.

NOTE: This function is only available on platforms that have native support for PAM or SIA. For more information on how to configure PAM or SIA, consult the documentation for your platform.

The service parameter identifies the name of the PAM service to use to authenticate the user. This can be any valid service name configured in the PAM/SIA system configuration. It defaults to the PAM service "login".

This function returns 0 to indicate failure and 1 to indicate success.

Example
if (user=="paul" && basename(command)=="useradd") 
{ 
   if (!authenticate_pam_toclient(user, "sshd")) 
   { 
      reject; 
   } 
   runuser="root"; 
   accept; 
   }
Related Topics

authenticate_pam

Authenticate PAM to Client

Related Documents