Chat now with support
Chat with Support

Safeguard for Sudo 2.0 - Administrators Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration
Download Privilege Manager for Unix Software Packages Download Privilege Manager for Sudo Software Packages Quick Start and Evaluation Configure a Primary Policy Server Configure a Secondary Policy Server Install PM Agent or Sudo Plugin on a Remote Host Remove Configurations
Upgrading Privilege Manager System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager Programs Installation Packages Unsupported Sudo Options Sudo Plugin Policy Evaluation About us

Local Daemon Hosts

Each machine that executes requests using Privilege Manager for Unix must run a pmlocald daemon. Typically you will run pmlocald on all your machines.

(See pmlocald for more information.)

Sudo 1.8.1

Ensure that hosts running the Sudo Plugin have Sudo 1.8.1 or later installed.

NOTE: If you have multiple instances of Sudo, update the PATH environment variable to ensure Privilege Manager for Sudo uses the correct version.

Install the Privilege Manager Packages

Installation and Configuration > Configure a Primary Policy Server > Install the Privilege Manager Packages

After you make sure your primary policy server host meets the system requirements, you are ready to install the Privilege Manager packages.

To install the Privilege Manager packages

  1. From the command line of the host designated as your primary policy server, run the platform-specific installer. For example, run:
    # rpm –-install qpm-server-*.rpm

    NOTE: The Solaris® server has a filename that starts with QSFTpmsrv.

    When you install the qpm-server package, it installs all three Privilege Manager components on that host: the Privilege Manager Policy Server, the PM Agent, and the Sudo Plugin.

Modify User's PATH Environment Variable

After you install the primary policy server, you may want to update your PATH to include the Privilege Manager for Unix commands.

To modify the user's PATH environment variable

  1. If you are a Privilege Manager administrator, add these paths to your PATH environment:
    /opt/quest/bin:/opt/quest/sbin
  2. If you are a Privilege Manager user, add this path to your PATH environment:
    /opt/quest/bin
Related Documents