Linux / Unix

Monthly Buzz - March - Privilege Management Unix Linux

How to Upgrade EPM-UL Using The BIUL U-series Web Console This article provides the steps to upgrade Endpoint Privilege Management for Unix and Linux (EPM-UL) through the U-Series appliance web console. This only applies to instances installed through the U-Series web console, and not those installed using the local Linux console. Pre-requisites Only the versions of EPM-UL that have been made available for BT Updater can be installed through the U-Series appliance web console. All masters in the environment should be upgraded and confirmed to be working before upgrading the client machines. Mismatching master node versions can lead to unexpected behavior. Log in to the BIUL U-series webconsole as an administrator (https://<u-series appliance>/pbsmc) Click Hosts Inve

100

12 days ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Mar 30 - Apr 6)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022139 - pbrun24.1.4-05[2730476]: Could not connect to run host

6 days ago

Prudhvi KeertipatiGuru

asked in Linux / Unix

PMUL Policy Scripts: ACA

Hi everyone,I’m trying to use aca to block some commands after user switch to a root account using pbrun. But I’m not able to achieve it, below is the sample script I have. Please suggest the changes to effectively use aca to block commands.bash is an alias command to switch to root user. I can still run whoami command after switch to root.if (command == bash){aca("file", "/use/bin/whoami", "!all", "BLOCK");accept;} Thanks,

231

2 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jan 12 - Jan 19)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023237 - EPM-UL shell or bash command error: 3430 Insecure operation. 3201.08 Exec of /bin/bash failed: Operation not permitted

160

2 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jan 5 - Jan 12)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023225 - Does CVE-2025-9230 and CVE-2025-9232 affect EPM-UL?

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 22 - Dec 29)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023181 - How to uninstall EPM-UL

180

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 15 - Dec 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021758 - LDAP binding to Active Directory on EPM-UL fails with error - pbrun23.1.2-04[947719]: 3005 Request ended unexpectedly KB0021817 - Errors assigning EPM-UL license key - 3802.6 This host is not the Primary License server or 6025.78 Host is incorrect in the Registry Name Service Cache database

250

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023150 - EPM-L fails to activate "Error activating"

110

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Nov 24 - Dec 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023106 - RPMS error "Service:5: Failed to add dependency on @pblighttpd_after@, ignoring: Invalid argument" KB0023109 - How to upgrade EPM-UL using the BIUL U-series web console

500

4 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - November - Privilege Management Unix Linux

370

4 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Nov 10 - Nov 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021510 - pblighttpd.service returns a failed state after it is stopped

150

4 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - October - Privilege Management Unix Linux

Getting and Deploying a New EPM-UL License File When purchasing a new Endpoint Privilege Management Unix or Linux (EPM-UL) license key, BeyondTrust will generate the license key based on the hostname and domain name. In some cases, the hostname or domain name can change. If this happens, users will need to request a new EPM-UL license file. To change the hostname to which the PMUL license key is linked, please download the attached PMUL License Request document listing the hostname, PBHostID, version, and the number of licenses to be assigned. Once this document has been filled out, please forward this to BeyondTrust's Fulfilment team by emailing

750

5 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Oct 20 - Oct 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021713 - pbuninstall uses high amount of memory and CPU and is not behaving correctly on Ubuntu18 KB0021749 - EPM-UL - Client registration or REST call fails error "Failed to call REST API - HTTP returned error" KB0023004 - pbrun command fails with UTMP and WTMP errors

140

5 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Oct 6 - Oct 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021714 - User assigned to a Role Based Policy in EPM-L is unable to use the policy KB0021725 - 6101.53 Error accessing Message Router statistics error in msgrouter and pb.eventlog is not logging in eventlog

570

5 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - September - Privilege Management Unix Linux

Re-creating Certificates for EPM-UL This article outlines the steps to generate a new certificate for Endpoint Privilege Management for Unix and Linux (EPM-UL). By default the service pblighttpd.service uses the certificate /usr/lib/beyondtrust/pb/rest/ssl/rest.pem. Admins can create another certificate and name it rest.pem to replace the current one. Steps Generate the certificate Copy the pem file /etc/pbssl.pem to a backup location Extract the ISO contents of the version of EPM-UL to the /tmp directory (replace paths in the command with the correct version). This will create a new certificate pbssl.pem. For argument explanations, refer to pbreg

120

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 22 - Sep 29)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021676 - Error: pbguid Exiting failed to read settings file /etc/pb.settings - general SQL error "

410

EPM-UL Registration Name Services (RNS) - Add Hosts to Service Group

Prudhvi KeertipatiGuru

asked in Linux / Unix

Hi All,I’m trying to add clients/servers to the RNS Service Hosts but I’m not able to do it and I couldn't find relevant documentation around it. Can you please help. It is a dev environment, and I currently have 2 servers. First one is hosting all components and RNS. When I try to add servers or clients to the service groups. I don't find the other host. When I try to install the components using any of the default client registration profiles. Installation getting failed. Below is the installation err

661

EPM-UL On-Prem Firewall Port Requirements

Prudhvi KeertipatiGuru

asked in Linux / Unix

Hi All,Could you please clarify whether REST API port 24351 (pbrestport) needs to be configured for bidirectional communication between BIUL and all hosts (including the policy server and endpoints), or if it should be set up as unidirectional—from BIUL to all hosts, or from all hosts to BIUL? Thanks

561

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 15 - Sep 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022889 - SSH connections fail using pbrun in profile.d scripts (VSCode) KB0022904 - EPM-UL install fails "Error this installation is for Privilege Management for Unix & Linux package creation"

180

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 1 - Sep 8)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021256 - EPM-UL pbbench fails with error 8523 Client failure in SSL_connect - Unable to initilize SSL to policy server KB0021403 - EPM-UL error - 3811.3 This server is not a License Server KB0021407 - How identify roles contains specific hostgroup for EPM-UL

240

7 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - August - Privilege Management Unix Linux

How to install EPM-UL agent on AIX using package installer Listed below is a summary of steps for installing the Endpoint Privilege Management for Unix and Linux (EPM-UL) agent on an AIX server using the package installer. In this article EPM-UL version 22.2 is used however, these steps are good for other versions of EPM-UL as well. In the below example, a runhost and submithost are set up and there is already a primary policy server setup that will be specified.For further install instructions, please review AIX Install Procedure. Copy the following files to the /opt/ directory AIXSRV client PMUL_aix_22.2.0-07.tar.Z PMUL_aix_22.2.0-07_pkg.tar.Z

190

7 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Aug 18 - Aug 25)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022740 - pbrun fails with error "Cannot access sharedlibsolarisprojects /usr/lib/libproject.so" KB0022781 - "3430 Insecure operation" error when installing epml-cachedclient or epm-client packages KB0022785 - Linux Server with Palo Alto firewall fail to connect with error 3003.01 Could no

470

7 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Aug 4 - Aug 11)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021406 - Is EPM-UL affected by CVE-2022-41556?

190

8 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - July - Privilege Management Unix Linux

Onboarding Linux/Unix Servers and Local Linux/Unix Accounts. There are specific deployment steps required to onboard Linux or Unix systems, as well as local Linux accounts. See details below Pre-deployment steps to be done on the Linux or Unix machine You must create an account to be used as the functional account. This account can be a local account or an Active Directory account that can login to the Linux or Unix system. A functional account must be set up to change passwords and have elevated privileges. Elevated privileges can be set up for the functional account to use sudo, pbrun or pmrun. You will need to create a scan account. Check the machine to see if there are any custom prompts or banners with th

820

8 months ago

GloriaBBeyondTrust Employee