立即与支持人员聊天
与支持团队交流

Privilege Manager for Unix 7.0 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

Installing the InTrust Knowledge Pack

To install the InTrust Knowledge Pack

  1. Using a InTrust for Active Directory Administration account, login to your InTrust for Active Directory server.
  2. Extract the Privilege_Manager_InTrust_<version>.zip file to a temporary folder, such as, d:\temp.
  3. Open a command prompt and change to the following directory:
    <INTRUST_HOME>\Server\ADC\SupportTools\
  4. Import each of the XML files using the InTrustPDOImport.exe command, as following:
    # InTrustPDOImport.exe -import D:\temp\PM_DataSource.xml 
    # InTrustPDOImport.exe -import D:\temp\PM_GatheringJob.xml 
    # InTrustPDOImport.exe -import D:\temp\PM_GatheringJob_igtc.xml 
    # InTrustPDOImport.exe -import D:\temp\PM_GatheringPolicy.xml 
    # InTrustPDOImport.exe -import D:\temp\PM_GatheringTask.xml 
    # InTrustPDOImport.exe -import D:\temp\PM_Site.xml
  5. Verify the Privilege Manager for Unix objects are in the InTrust Manager, under Sites:

InTrust Knowledge Pack objects

Table 24: InTrust Knowledge Pack objects
Object type Objects
Gathering policy Privilege Manager for Unix: Event Log Monitoring’
Job ‘Gather Privilege Manager for Unix Events’
Task Privilege Manager for Unix daily collection of events’
Site Privilege Manager for Unix hosts’
Report

Privilege Manager for Unix All Events’

Privilege Manager for Unix All Events By Result’

Privilege Manager for Unix Elevated Privilege Events’

Privilege Manager for Unix Policy Server By Result’

Privilege Manager for Unix Policy Server Events’

Privilege Manager for Unix Rejected Events’

Privilege Manager for Unix Out Of Band Events’

Privilege Manager for Unix Event Log’

Installing the InTrust Reporting Pack

To install the InTrust Reporting Pack

  1. Using an InTrust Administration account, log in to your InTrust server.
  2. Run the MSI file extracted in the previous section from Privilege_Manager_InTrust_<version>.zip
    # d:\temp\QPM4U.1.0.0.006.msi

    To use the MSI installer for the InTrust Reporting Pack, your InTrust Server must use the WindowsSQL Server 2005 as its back-end database.

  3. Follow the instructions in the on-screen Wizard.
  4. Using a web browser, navigate to your InTrust reports and verify that you now have an InTrust for Privilege Manager for Unix section, for example:
    http://<Intrust Server>/Reports

Configuring the InTrust data collection

To install the InTrust data collection

  1. Using an InTrust Administration account, log in to your InTrust server.
  2. From the menu, navigate to: Configuration | Sites | Unix Network | Privilege Manager for Unix hosts.
  3. Right click, then select Properties.
  4. Select the Objects tab, click Add | Computer, then enter the name of your Privilege Manager for Unix policy server InTrust agent.
  5. Click Apply, then OK.
  6. From the menu, navigate to: Workflow | Tasks | Privilege Manager for Unix daily collection of events.
  7. Right click, then select Run.
  8. From the menu, navigate to: Workflow | Sessions and view the status of your running task which should complete within a couple of minutes, depending on the size of your InTrust event log.
  9. Verify that the task completes successfully without errors.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级