Novell PRIVILEGED USER MANAGER 2.2.1 - ADMINISTRATION GUIDE... Manuale utente

Novell®

www.novell.com

novdocx (en) 16 April 2010

AUTHORIZED DOCUMENTATION

Novell Privileged User Manager 2.2.1 Getting Started Guide

Privileged User Manager

2.2.1

March 31, 2010

Getting Started Guide

novdocx (en) 16 April 2010

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 16 April 2010

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Novell Privileged User Manager 2.2.1 Getting Started Guide

novdocx (en) 16 April 2010

Contents 5

Contents

novdocx (en) 16 April 2010

About This Guide 7

1 Novell Privileged User Manager Overview 9

1.1 Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.3 What’s New in 2.2.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

1.3.1 General Installation Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.3.2 Framework User Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.3.3 Command Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.3.4 Compliance Auditor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.3.5 Reporting Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

1.3.6 Package Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2 Installation Requirements 13

2.1 Software Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.3 Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.4 Procedural Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

3 Installing the Framework Manager 15

3.1 Installing a Framework Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.1.1 AIX Framework Manager Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.1.2 HP-UX Framework Manager Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.1.3 Linux Framework Manager Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.1.4 Solaris Framework Manager Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

3.1.5 Tru64 Framework Manager Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.1.6 Windows Framework Manager Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.2 Accessing the Framework Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3 Installing a Novell Privileged User Manager License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3.4 Setting Up a Package Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3.5 Stopping and Restarting the Framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

3.5.1 AIX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

3.5.2 HP-UX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

3.5.3 Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

3.5.4 Solaris . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

3.5.5 Tru64 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.5.6 Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.6 Removing the Framework Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.6.1 AIX Manager Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.6.2 HP-UX Manager Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.6.3 Linux Manager Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.6.4 Solaris Manager Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.6.5 Tru64 Manager Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.6.6 Windows Manager Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

6Novell Privileged User Manager 2.2.1 Getting Started Guide

novdocx (en) 16 April 2010

4 Installing the Agents 27

4.1 Agent Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

4.2 Creating a Host Name for Each Agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

4.3 Opening Firewall Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

4.4 Installing and Registering a Framework Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

4.4.1 AIX Agent Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

4.4.2 HP-UX Agent Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

4.4.3 Linux Agent Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

4.4.4 Solaris Agent Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

4.4.5 Tru64 Agent Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

4.5 Removing the Agent Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.5.1 AIX Agent Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.5.2 HP-UX Agent Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.5.3 Linux Agent Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.5.4 Solaris Agent Uninstall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.5.5 Tru64 Agent Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

5 Upgrading from 2.2 to 2.2.1 35

About This Guide 7

novdocx (en) 16 April 2010

About This Guide

This Getting Started Guide explains the hardware requirements for the Privileged User Manager

components, then explains how to install the components.

Chapter 1, “Novell Privileged User Manager Overview,” on page 9

Chapter 2, “Installation Requirements,” on page 13

Chapter 3, “Installing the Framework Manager,” on page 15

Chapter 4, “Installing the Agents,” on page 27

Chapter 5, “Upgrading from 2.2 to 2.2.1,” on page 35

Audience

This guide is intended for users who install and manage the Privileged User Manager product.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to www.novell.com/documentation/feedback.html and enter your

comments there.

Documentation Updates

For the most recent version of the Getting Started Guide, visit the Privileged User Manager Web

Site (http://www.novell.com/documentation/privilegedusermanager22).

Additional Documentation

Privileged User Manager Administration Guide (http://www.novell.com/documentation/

privilegedusermanager22/npum_admin/data/bkyzr9y.html)

Documentation Conventions

In Novell®documentation, a greater-than symbol (>) is used to separate actions within a step and

items in a cross-reference path.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

8Novell Privileged User Manager 2.2.1 Getting Started Guide

novdocx (en) 16 April 2010

Novell Privileged User Manager Overview

novdocx (en) 16 April 2010

Novell Privileged User Manager

Overview

Novell®Privileged User Manager delivers a robust and scalable architecture, intuitive management

console and reusable script and command libraries that enable administrators to reduce management

overhead and infrastructure costs in your environment.

Section 1.1, “Product Overview,” on page 9

Section 1.2, “Components,” on page 9

Section 1.3, “What’s New in 2.2.1,” on page 10

1.1 Product Overview

Many organizations needlessly expose their superuser or root account credentials to users who are

required to run commands that need elevated privileges, and passwords are often not changed when

administrative staff change jobs. This opens potential back doors into systems and increases the

likelihood of a security breach.

Novell Privileged User Manager helps IT administrators manage the identity and access for

superuser and root accounts by providing controlled superuser access to administrators, allowing

them to perform jobs without needlessly exposing root account credentials. It also provides a

centralized activity log across multiple platforms. The introduction of Novell Privileged User

Manager enriches the Novell Identity and Access Management and Compliance Management

solutions by adding auditing and tracking capabilities for privileged user activity across the

organization.

Novell Privileged User Manager limits corporate susceptibility to unauthorized transactions and

information access by helping organizations rapidly deploy superuser management and tracking

across all UNIX* and Linux* environments. It reduces management overhead and infrastructure

costs, controls and records which privileged users have access to what, and reduces costs and errors

through demonstrable compliance audits.

Novell Privileged User Manager works by delegating privileged access, which is authorized via a

centralized database. The end result is that a user is authorized to run the privileged command and

all activity is logged. The centralized database provides for easier administration. Compared to

competitive solutions in the marketplace, Novell Privileged User Manager is deployed more

quickly, provides faster response time, better logging and auditing and improved administration, and

leads to a more secure system and a fast return on investment.

1.2 Components

Privileged User Manager consists of a Framework Manager, where you manage and configure the

system, and an agent, which is installed on each machine where you want to monitor and control

superuser access.

10 Novell Privileged User Manager 2.2.1 Getting Started Guide

novdocx (en) 16 April 2010

Figure 1-1 Framework Manager

From the Home page, you have access to six administrative consoles:

Compliance Auditor: Proactive auditing tool that pulls events from the event logs for

analysis, according to predefined rules. It pulls filtered audit events at hourly, daily, weekly or

monthly intervals. This enables auditors to view prefiltered security transactions, play back

recordings of user activity, and record notes for compliance purposes. In an era of increasing

regulatory compliance requirements, the ability to supply demonstrable audit compliance at

any time provides a more secure system and reduces audit risk.

Framework User Manager: Manages users who log in to the Framework Manager through

role-based grouping.

Hosts: Centrally manages Privileged User Manager installation and updates, load-balancing,

redundancy of resources, and host alerts.

Reporting: Provides easy access and search capability for event logs and allows you review

and color-code user keystroke activity through the Command Risk Analysis Engine.

Command Control: Uses an intuitive graphical interface to manage security policies for

privilege management.

Package Manager: Lets you easily update any Privileged User Manager application.

1.3 What’s New in 2.2.1

The following new features have been added to Privileged User Manager 2.2.1.

Section 1.3.1, “General Installation Updates,” on page 11

Section 1.3.2, “Framework User Manager,” on page 11

Section 1.3.3, “Command Control,” on page 11

Section 1.3.4, “Compliance Auditor,” on page 11

Section 1.3.5, “Reporting Console,” on page 12

Section 1.3.6, “Package Manager,” on page 12

Altri manuali per PRIVILEGED USER MANAGER 2.2.1 - ADMINISTRATION GUIDE...

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Novell Software

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Manuale utente

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Manuale utente

Novell

Novell GROUPWISE 7 ASYNC GATEWAY - INSTALLATION AND... Manuale utente

Novell

Novell POLICIES IN IMANAGER 3.6.1 - 06-05-2009 Manuale utente

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP1 - 9-21-2010 ADMINISTRATION GUIDE FOR OPEN ENTERPRISE SERVER 1 SP2... Manuale di istruzioni

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE... Guida di riferimento rapido

Novell

Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 9.3 - ADMINISTRATION... Manuale utente

Novell

Novell GROUPWISE 8 - POST OFFICES Manuale utente

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION Manuale utente

Novell

Novell IDENTITY MANAGER 3.6.1 - STAGING BEST PRACTICES GUIDE... Manuale utente

Novell

Novell LINUX ENTERPRISE SERVER 10 SP2 - STORAGE ADMINISTRATION GUIDE... Manuale di istruzioni

Novell

Novell IFOLDER 3.8 - CROSS-PLATFORM Manuale utente

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Manuale utente

Novell

Novell OPEN ENTERPRISE SERVER 2.0 SP2 - UPGRADING TO OES-PLANNING AND IMPLEMENTATION GUIDE... Manuale utente

Novell

Novell EDIRECTORY 8.8 SP5 - TUNING GUIDE FOR UNIX... Guida rapida

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION Manuale utente

Novell

Novell APPARMOR 1.2 Manuale di istruzioni

Novell

Novell IFOLDER 3.X - SECURITY ADMINISTRATOR GUIDE... Manuale di servizio

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.2.1 -... Manuale di istruzioni

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manuale tecnico

Novell

Novell LINUX ENTERPRISE SERVER 10 - ARCHITECTURE-SPECIFIC INFORMATION... Manuale

Novell

Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR... Manuale utente

Novell

Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 2.0 - ... Manuale utente

Novell

Novell GROUPWISE 7 GATEWAY FOR MICROSOFT EXCHANGE - INSTALLATION AND... Manuale di istruzioni

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente

Lexmark

Lexmark Apps Manuale di servizio