Chat now with support
Chat with Support

Safeguard for Sudo 6.1 Common Documents - Administration Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration Upgrade Privilege Manager for Sudo System Administration Managing Security Policy Administering Log and Keystroke Files Troubleshooting Privilege Manager Variables Privilege Manager programs Installation Packages Unsupported Sudo Options Privilege Manager for Sudo Policy Evaluation

Load balancing on the client

Load balancing is handled on each client, using information that is returned from the policy server each time a session is established.

If a session cannot be established because the policy server is unavailable (or offline) that policy server is marked as unavailable, and no further sudo sessions are sent to it until the next retry interval.

pmpluginloadcheck runs transparently on each host to check the availability and loading of the policy server. When a policy server is marked as unavailable, pmpluginloadcheck attempts to connect to it at intervals. If it succeeds, the policy server is marked as available and able to run Privilege Manager sessions.

To view the current status of the policy server

  • Run the following command:

    # pmpluginloadcheck [-f]

If the policy server cannot be contacted, the last known information for this host is reported.

Remove configurations

You can remove the Privilege Manager Server or Sudo Plugin configurations by using the –u option with the following commands:

  • pmsrvconfig to remove the Privilege Manager for Sudo Server configuration
  • pmjoin_plugin to remove the Sudo Plugin configuration

Take care when you remove the configuration from a policy server, particularly if the policy server is a primary server with secondary policy servers in the policy group, as agents joined to the policy group will be affected.

Uninstalling the Privilege Manager software packages

To uninstall the Privilege Manager packages

  1. Log in and open a root shell.
  2. Use the package manager for your operating system to remove the packages:
Table 6: Privilege Manager Server unistall commands
Package Command
RPM # rpm -e qpm-server
DEB # dpkg -r qpm-server
Solaris # pkgrm QSFTpmsrv
HP-UX # swremove qpm-server
AIX # installp -u qpm-server
Table 7: Sudo Plugin uninstall commands
Package Command
RPM # rpm -e qpm-plugin
DEB # dpkg -r qpm-plugin
Solaris # pkgrm QSFTpmplg
HP-UX # swremove qpm-plugin
AIX # installp -u qpm-plugin

Uninstalling Privilege Manager for Sudo on macOS

To uninstall Privilege Manager for Sudo on macOS

  1. Open /Applications and click QPM4Sudo_Uninstaller.
  2. When it asks if you want to delete the pmclient user, enter yes or no.

To uninstall Privilege Manager for Sudo from the command line

  1. Enter:
  2. To delete the pmclient user, enter:
    dscl . -delete /Users/pmclient
Related Documents