Cannot use Tivoli Identity Manager on Privilege Manager for Sudo systems. (4261740)

Cannot use Tivoli Identity Manager on Privilege Manager for Sudo systems.

Tivoli sessions fail when using Privilege Manager for Sudo.

Software is stating that it cannot connect. CONNECTION_ERROR

The account requires tty is not used.

Privilege Manager for Sudo keystroke logging is enabled.

Privilege Manager needs the tty for keystroke logging.  If keystroke logging is enabled and Tivoli commands try to connect without a tty, the Privilege Manager sessions would fail. Disabling the keystroke logging allows Privilege Manager sessions to succeed over non-tty connections.


Try disabling keystroke logging in the sudoers file by commenting out the following in the sudoers file:

Defaults   log_output
Defaults   log_input

If that resolves the issue you could then disable keystroke logging for only the particular account used for Tivoli:

Defaults:username !log_input
Defaults:username !log_output