Linux / Unix

The following articles were published last week. New Knowledge Base Articles: KB0021676 - Error: pbguid Exiting failed to read settings file /etc/pb.settings - general SQL error "

Hi All,I’m trying to add clients/servers to the RNS Service Hosts but I’m not able to do it and I couldn't find relevant documentation around it. Can you please help. It is a dev environment, and I currently have 2 servers. First one is hosting all components and RNS. When I try to add servers or clients to the service groups. I don't find the other host. When I try to install the components using any of the default client registration profiles. Installation getting failed. Below is the installation error:

Hi All,Could you please clarify whether REST API port 24351 (pbrestport) needs to be configured for bidirectional communication between BIUL and all hosts (including the policy server and endpoints), or if it should be set up as unidirectional—from BIUL to all hosts, or from all hosts to BIUL? Thanks

The following articles were published last week. New Knowledge Base Articles: KB0022889 - SSH connections fail using pbrun in profile.d scripts (VSCode) KB0022904 - EPM-UL install fails "Error this installation is for Privilege Management for Unix & Linux package creation"

The following articles were published last week. New Knowledge Base Articles: KB0021256 - EPM-UL pbbench fails with error 8523 Client failure in SSL_connect - Unable to initilize SSL to policy server KB0021403 - EPM-UL error - 3811.3 This server is not a License Server KB0021407 - How identify roles contains specific hostgroup for EPM-UL KB0021421 - 3802.2 Invalid parameter - must supply reason message KB0021475 - REST (Pbconfigd) processes not running on hosts after upgrading from BIUL 21.1 to 23.1

The following articles were published last week. New Knowledge Base Articles: KB0022740 - pbrun fails with error "Cannot access sharedlibsolarisprojects /usr/lib/libproject.so" KB0022781 - "3430 Insecure operation" error when installing epml-cachedclient or epm-client packages KB0022785 - Linux Server with Palo Alto firewall fail to connect with error 3003.01 Could not connect to a policy server daemon KB0022793 - Is EPM-UL vulnerable to libssl and libcurl CVE-2024 vulnerabilities ? KB0022800 - Is YK38 compatible with EPM-UL? Are there any risks? KB0022807 - Does CVE-2025-7425 Use-After-Free vulnerability in libxslt affect EPM-UL?

The following articles were published last week. New Knowledge Base Articles: KB0021406 - Is EPM-UL affected by CVE-2022-41556?

The following articles were published last week. New Knowledge Base Articles: KB0021379 - Does CVE-2024-6387 affect Endpoint Privilege Management? KB0022672 - pbevent.log is not updating

The following articles were published last week. New Knowledge Base Articles: KB0022671 - EPM Cloud for Linux (EPM-L SaaS) clients do not show in the console after pbactivate has been run

The following articles were published last week. New Knowledge Base Articles: KB0022541 - Constrains violation when installing PMUL with RNS "4012.01 Failed set Host in Registry Name Service" KB0022544 - Is it possible to manage the password for pblight? KB0022549 - Why does the pblighttpd.log file need execute permissions?

The following articles were published last week. New Knowledge Base Articles: KB0022138 - Deploying Beyondinsight for Unix and Linux (BIUL)

The following articles were published last week. New Knowledge Base Articles: KB0022371 - Unable to elevate with EPM-UL and sudo - Error 8523 Client failed to contact remote host

The following articles were published last week. New Knowledge Base Articles: KB0022130 - Unable to use Sudo commands. Client licensing error - No space left on device KB0022139 - pbrun24.1.4-05[2730476]: Could not connect to run host

The following articles were published last week. New Knowledge Base Articles: KB0021293 - Session not authorized due to licensing constraints KB0022177 - Unable to to use pbrun after upgrade to OEL 8.9 "8057.01 PAM SESSION Error: PAM session start failure"

The following articles were published last week. New Knowledge Base Articles: KB0022138 - Deploying Beyondinsight for Unix and Linux (BIUL)

The following articles were published last week. New Knowledge Base Articles: KB0021479 - Could not create any of the 1 tasks requested Received "expected installer was not found"

The following articles were published last week. New Knowledge Base Articles: KB0021979 - How to activate policy caching for EPM-UL

EPM-L and EPM-UL have extensive ability to log privilege access and sessions. You can use the pbsh and pbksh to log and record unprivileged session, however the problems with that are twofold. Firstly, the pb-shell environments are incompatible with Advanced Control and Audit rules, and secondly, the shell environments are out-of-date compared to modern shell environments. They lack modern features like command argument completion, wildcard completion, directory history stack and others due to their age. Maybe a modern shell environment like bash, zsh or fish will get integrated into the product.The first issue is easily taken care of by normal DAC file system permissions, they are unprivileged users after all. The second issue is more complex and could be solved by just forcing people to use pbksh, but there is a method of logging which is secure, and respects the users choice of shell. That is by using a combination of PAM (the Linux Pluggable Authentication Modules) and auditd.Audit

Hi Team, I am trying PMUL and want to ask if i can block any standard command without pbrun. Example:I want to block the standard ping but without using pbrun ping.ping 8.8.8.8 should be rejected. But for now, i can only reject if user executed pbrun ping 8.8.8.8.Can we do that in PMUL? (right now, i am using role-based policies)I have a case from end-user, they want to block all kind of command except 2 or 3 specific commands.Thanks