pmclientd [-v]i|[-z on|off[:<pid>]]
(Privilege Manager for Unix only.) The pmclientd daemon runs on an agent and allows the agent to respond to remote requests sent by a policy server as a result of calling a remote function from the policy file. It is not required on a policy server, as the pmmasterd daemon can serve these requests, if received from another policy server. pmclientd listens on the configured policy server port and responds to a remote request received from any valid policy server or any host listed in the clients setting in pm.settings.
pmclientd has the following options:
| Option | Description |
|---|---|
| -v | Displays the version number of Privilege Manager for Unix and exits. |
| -z | Enables/disables debug tracing, and optionally sends SIGHUP to running process. (Refer to Enabling Program-level Tracing before using this option.) |
pmclientinfo -v | [-z on|off[:<pid>]]] | -c [-h <host>]
(Privilege Manager for Unix only.) The pmclientinfo utility displays configuration information about a client host. This utility provides some information about the policy server group and the license features supported by the policy server group. You can specify a host on the command line to retrieve the details from a specific policy server host. Otherwise, the utility checks each policy server listed in the pm.settings file in turn until it finds one in a policy server group. Any user can run pmclientinfo.
pmclientinfo has the following options:
| Option | Description |
|---|---|
| -c | Displays CSV, rather than human-readable output. |
| -h <host> | Specifies policy server host name to interrogate for policy group information. |
| -v | Shows product version and exit. |
| -z | Enables/disables debug tracing. (Refer to Enabling Program-level Tracing before using this option.) |
Any user on the host can run this utility. It displays the following information, in human readable or CSV format:
- Joined to a policy group : YES - Policy group name configured for this policy server group : adminGroup1 - Primary policy server hostname : adminhost1
Human Readable output from a client:
- Joined to a policy group : YES - Name of policy group : adminGroup1 - Hostname of primary policy server : adminhost1.example.com
CSV output from a client:
PMCLIENTINFO.JOINED,Joined to a policy group,YES PMCLIENTINFO.POLICYGROUPNAME,Name of policy group,adminGroup1 PMCLIENTINFO.PRIMARYPOLICYSERVER,Hostname of primary policy server,adminhost1.example.com
pmcp [-v]|[-z on|off[:<pid>]] [-m masterhost] file1 rhost:file2
(Privilege Manager for Unixonly.) Use pmcp to copy a file from one host to another. The pmcp command allows you to select the policy server host to contact, bypassing the usual selection methods. The specified host must be present in the masters setting in the pm.settings file. This functionality is the same as using pmrun [-m masterhost].
You can use the following policy variables with pmcp:
| Option | Description |
|---|---|
| Variable | Description |
| filesize | Specifies the size of the source file. |
| filename | Specifies the name of the source file, including the full path. |
| filedest | Specifies the name of the target file, including the full path. |
| fileuser | Specifies the user name associated with the source file UID. |
| filegroup | Specifies the group name associated with the source file GID. |
| filedate | Specifies the date that the source file was last modified. This returns a string in the form: YYYY/MM/DD. |
pmcp has the following options:
| Option | Description |
|---|---|
| -m | Select a policy server host to contact |
| -v | Show version information |
| -z | Enables/disables debug tracing, and optionally sends SIGHUP to running process. (Refer to Enabling Program-level Tracing before using this option.) |
pmcsh
(Privilege Manager for Unix only.) The Privilege Manager C Shell (pmcsh) command starts a C shell, an interactive command interpreter and a command programming language that uses syntax similar to the C programming language. The C shell carries out commands either interactively from a terminal keyboard or from a file. pmcsh is a fully featured version of csh, that provides transparent authorization and auditing for all commands submitted during the shell session. All standard options for csh are supported by pmcsh.
To see details of the options and the shell built-in commands supported by pmcsh, run pmcsh -?
Using the appropriate policy file variables, you can configure each command entered during a shell session, to be:
Once allowed by the shell, or authorized by the policy server, all commands are executed locally as the user running the shell program.
pmcsh has the following options:
| Option | Description |
|---|---|
| -b file | Batch mode, read and execute commands from `file'. |
| -B | Allow the shell to run in the background. |
| -c command | Run `command' from next argument. |
| -d | Load directory stack from ~/.cshdirs. |
| -Dname[=value] | Define environment variable `name' to `value' (DomainOS only). |
| -e | Exit on any error. |
| -f | Start faster by ignoring the start-up file. |
| -F | Use fork() instead of vfork() when spawning (ConvexOS only). |
| -i | Interactive, even when input is not from a terminal. |
| -l | Act as a login shell, must be the only option specified. |
| -m | Load the start-up file, whether or not owned by effective user. |
| -n file | No execute mode, just check syntax of the following `file'. |
| -q | Accept SIGQUIT for running under a debugger. |
| -s | Read commands from standard input. |
| -t | Read one line from standard input. |
| -U | Request to run the shell session as the selected user. |
| -v | Echo commands after history substitution. |
| -V | Like -v but including commands read from the start-up file. |
| -x | Echo commands immediately before execution. |
| -X | Like -x but including commands read from the start-up file. |
| --help | ? | Print this message and exit. |
| --version | Print the version shell variable and exit. |
pmcsh supports the following built-in functions:
:, @, alias, alloc, bg, bindkey, break, breaksw, builtins, casecd, chdir, complete, continue, default, dirs, echo, echotc, else, endendif, endsw, eval, exec, exit, fg, filetest, foreach, glob, gotohashstat, history, hup, if, jobs, kill, limit, log, login, logoutls-F, nice, nohup, notify, onintr, popd, printenv, pushd, rehash, repeatsched, set, setenv, settc, setty, shift, source, stop, suspend, switchtelltc, termname, time, umask, unalias, uncomplete, unhash, unlimit, unset, unsetenvwait, where, which, while
© 2020 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy
