Safeguard for Sudo 2.0 - Administrators Guide

Download Privilege Manager for Sudo Software Packages

To download the Privilege Manager for Sudo software packages

1. Go to https://www.quest.com/products/privilege-manager-for-sudo and click Support Services | Product Support. On the Product Support page, click Software Downloads, and then click Download to the right of the version to be downloaded..

   NOTE: See Installation Packages for more information about Privilege Manager native platform install packages.

2. Read the License Agreement, select the I have read and accept the agreement option, and click Submit.

3. Download the relevant package from the web page.

   NOTE: The Privilege Manager server package includes the PM Agent and the Sudo Plugin components.

Quick Start and Evaluation

To simplify the installation and configuration of the Privilege Manager components, Quest recommends that you install One Identity Management Console for Unix. Management Console for Unix provides a web-based mangement console, a powerful and easy-to-use tool that dramatically simplifies deployment, enables management of local Unix users and groups, provides granular reports on key data and attributes, and streamlines the overall management of your Unix, Linux^®, and Mac OS X^® hosts.

To test Privilege Manager, you must setup at least one primary policy server and one remote host system configured with either the PM Agent or the Sudo Plugin.

Installing the Management Console

Management Console for Unix makes it easy for you to centrally manage a policy file on a primary policy server.

You can install the mangement console on Windows^®, Unix, or Mac OS X^® computers. Each hosting platform prompts for similar information.

The following install files are located on the Privilege Manager for Unix distribution media under console | server:

• ManagementConsoleForUnix_unix_2_5_0.sh - for Unix
• ManagementConsoleForUnix_windows_2_5_0.exe - for Windows^®
• ManagementConsoleForUnix_macos_2_5_0.dmg - for Mac OS X^®

The One Identity Management Console for Unix Administrator’s Guide contains detailed instructions for installing the mangement console on all of these platforms. Use the following procedure to install the mangement console on a Unix computer from the command line using the installation script:

To install the mangement console on a Unix platform

1. Log in and open a root shell.
2. Mount the installation media and navigate to console | server.
3. Run the following command from the Unix command line as root:

   # sh ManagementConsoleForUnix_unix_2_0_0.sh

   You can optionally use one of these options:

   • -q option ("quiet" mode) to automatically accept all the default settings.

   • -c option ("console" mode) to prompt you for information interactively.

   NOTE: Using no option starts the installer in a graphical user interface if you have an X server.

   In "console" mode, it asks you for the following information:

   1. Enter 1 to accept the user agreement.
   2. Enter the SSL Port number or click Enter to accept the default of 9443.
   3. Enter the Non-SSL Port number or click Enter to accept the default of 9080.

      The install wizard extracts and downloads the files, configures and starts the service, and so forth.

      NOTE: On Unix, the install location is /opt/quest/mcu and you cannot specify an alternate path.

Uninstalling the Management Console

To uninstall the mangement console from Unix

1. Run the following command as root:

   # /opt/quest/mcu/uninstall

2. Confirm that you want to remove Management Console for Unix.
3. Confirm whether you want to remove the application database and application logs or not.

   This option is useful if you plan to re-install Management Console for Unix and want to preserve your data. The default for the uninstaller is to remove everything.

   The wizard uninstalls Management Console for Unix.