The "master" copy of the policy file resides in a repository on the primary policy server. Each primary and secondary policy server maintains a "production" copy of the policy file or files. Use the pmpolicy utility to verify that the production copy is current with the master policy.
To compare the production policy file against the master policy on the primary server
- From the command line, enter:
# pmpolicy masterstatus
If the files are in sync, the Current Revision number will match the Latest Trunk Revision number. If someone hand-edited the local copy without using pmpolicy utility commands to commit the changes, "Locally modified" will indicate "YES".
If the production policy is not current with the master policy you can update the production policy with pmpolicy sync.
Related Topics
pmpolicy
When the policy server is not working as expected, use the pmsrvcheck command to determine the state of the server and its configuration.
To verify the policy server is running
- From the command line, enter:
# pmsrvcheck
This command returns output similar to this:
testing policy server [ Pass ]
If the policy server is working properly, the output returns 'pass', otherwise it returns, 'fail'.
Related Topics
pmsrvcheck
The primary and secondary policy servers need to communicate with each other. The Sudo Plugin hosts also need to communicate with the policy servers in the policy group. Run pmpluginloadcheck on the remote hosts to verify that they can communicate with the policy servers in the group.
To determine if there any issues with policy servers in the policy group
From the Safeguard for Sudo host command line, enter:
# pmpluginloadcheck -r
This command has output similar to this:
[0][root@sol10-x86 /]# pmpluginloadcheck -r
** Reporting current availability of each configured master...
* Host:myhost1.example.com (172.16.1.129) ... [ OK ]
** Based on this data, the server list is currently ordered as:
1. myhosts.example.com
Related Topics
pmpluginloadcheck
To check the Sudo Plugin configuration status
- From the command line, enter:
# pmplugininfo
This command returns output similar to this:
# pmplugininfo
- Joined to a policy group : YES
- Name of policy group : MyPolicyGroup
- Hostname of primary policy server : myhost.example.com
If the Sudo Plugin has been properly configured, it will say Joined to a Policy Group: YES and give the policy group name and primary policy server’s hostname.
Related Topics
pmplugininfo
