Chat now with support
Chat with Support

Safeguard for Sudo 2.0 - Administrators Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration
Download Privilege Manager for Unix Software Packages Download Privilege Manager for Sudo Software Packages Quick Start and Evaluation Configure a Primary Policy Server Configure a Secondary Policy Server Install PM Agent or Sudo Plugin on a Remote Host Remove Configurations
Upgrading Privilege Manager System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager Programs Installation Packages Unsupported Sudo Options Sudo Plugin Policy Evaluation About us

requestuser

Description

Type string READONLY

requestuser is initialized to the selected user name if you select the pmrun –u option. It is a request to set the runuser for the session to the selected user name. The administrator can decide whether to honor the request in the policy file. By default, this variable is set to the value of the user variable.

Example
if ((user in adminusers) && (requestuser in adminusers_allowed)) 
{ 
   runuser = requestuser; 
}

samaccount

Description

Type string READONLY

The user's sAMAccountName for the submit user if Authentication Services is configured and the client is able to determine the sAMAccountName. Otherwise this variable is set to an empty string.

Example
# reject if the user is not in the uxwheel AD group 
if (vas_user_is_member(samaccount, "uxwheel", domainname) == false) 
   reject "user is not in uxwheel group";
Related Topics

domainname

status

Description

Type integer READONLY

status contains the exit status of the most recent command run by the system function.

Example
Cprofile=system("find /home/custom_appl –name customprofile.txt"); 
if (status == 0) 
{ 
   welcome_msg=readfile(Cprofile); 
   print(welcome_msg); 
}

submithost

Description

Type string READONLY

submithost contains the name of the host where the request was submitted.

Example
if ( submithost == "sun.34.com" ) 
{ 
   reject; 
}
Related Topics

host

runhost

submithost

Related Documents