NetIQ Privileged Account Manager 3.1 Hotfix 1 resolves some of the previous issues.
NetIQ Privileged Account Manager, formerly known as NetIQ Privileged User Manager, helps IT administrators to manage the identity and access of super user accounts, by providing controlled super user access to authorized users. It has the capability to manage and audit privileged account activities in applications, database, and a wide range of other systems.
You can post feedback in the Privileged Account Manager Community Support Forum, our community website that also includes product notifications, blogs, and product user groups.
To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged Account Manager Documentation Web site.
This hotfix includes fix for the potential vulnerabilities that could allow information leakage. It also includes fix for the following issues:
Issue: When you install PAM 3.1 on a Linux or a UNIX machine, the installation completes with the chmod error messages. This issue occurs because the command control agent (rexec) package is missing in the installer.(Bug 989648)
Fix: The missing package is added in this release.
Issue: After upgrading to PAM 3.1, LDAP authentication fails for the users in the user groups that contain regex format.(Bug 990273)
Fix: This issue is fixed.
Issue: When users check out a key which is part of a shared key domain with multiuser option enabled, it returns only the first key that is listed in the domain.(Bug 990891)
Fix: This issue is fixed.
Issue: When you are using Require Login Password sample script, it authenticates all the users in spite of incorrect password.(Bug 994153)
Fix: This issue is fixed.
Issue: After creating or modifying a Windows account domain with LDAP profile as NetIQ eDirectory, the UI always displays the profile as Windows Active Directory irrespective of your selection.(Bug 990062)
Fix: This issue is fixed.
Issue: After agent restart or user unlock, the logged in user is displayed as Unknown User when connecting to windows 2012 R2 using credential provider.This issue occurs because the user is authorized using incorrect credential provider rule.(Bug 993218)
For Example: When you have two credential provider rule for two different windows agent that are part of the same domain and you perform agent restart or user unlock, the user is displayed as Unknown User. This is because instead of the second credential provider, the user is authorized using the first credential provider since there is no host group filter in the rule.
Fix: This issue is fixed.
For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements
in the NetIQ Privileged Account Manager 3.1 Installation Guide.
Privileged Account Manager supports two ways to install the hotfix. You can use any of the following ways:
You can configure your system to use the NetIQ Customer Center (NCC) and use the Package Manager to distribute the hotfix. See Section 3.1, Using the Package Manager with NCC
You can download the hotfix from the download site, install it on a local system, then use the Package Manager to distribute the hotfix. See Section 3.2, Using the Package Manager with a Local Server
This patch includes the following packages:
Framework Package (spf)
Command Control Agent (rexec)
Administration Manager (admin)
Audit Manager (audit)
Command Control Manager (cmdctrl)
Registry Manager (registry)
SSH Relay Agent (sshrelay)
Command Control Console (cmdctrl)
Package Management Console (pkgman)
Configure the Package Manager by using Novell Update Server:
Log in to the Framework Manager console.
Click Package Manager > Settings.
From the drop-down, select Novell Update Server.
Configure the following fields:
User name: Specify the user name that allows you to log in to the NetIQ Customer Center.
Password: Specify the password that is associated with this account.
To view the update server information, select Advanced Settings.
Select the Packages checkbox, the following URL is configured:
https://nu.novell.com:443/PUM/packages
Click Finish.
(Conditional) Configure the Package Manager by using Local Package Manager:
Log in to the Framework Manager console.
Click Package Manager > Settings.
From the drop-down, select Local Package Manager.
Fill in the following fields:
Host name: Specify the DNS name of the host.
Port: Specify the communication port. The default is 29120.
The Local Package Manager is a Framework host that has been configured to store the packages.
(Conditional) If you do not have the Framework patch loaded in your Package Manager:
Click Package Manager on the home page of the console, then click Add Packages.
Configure the Package Filter to display the packages you need.
Platform: Select required platforms. Make sure you select Cross Platform, which displays the console packages that run on all platforms.
Types: Select at least Console, Module, and Patch.
Components: Select all of them: Command Control, Framework, and Miscellaneous.
Select all the packages that are listed. Make sure you select the Framework Patch.
Click Next, then click Finish when the packages have been successfully downloaded.
To ensure that all packages are up-to-date, click Check for Updates.
Select any packages that are listed.
Click Next, then click Finish when the packages have been successfully downloaded.
Load the updates:
In the Package Manager page, click Check for Updates.
If updates are listed, select the packages, then click Next.
After the hotfix is loaded, click Finish.
To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.
Download the hotfix manually:
On the NetIQ Downloads site, select the Basic Search tab.
On the right pane, select Search Patches.
On the Patch Finder page, select Privileged User Manager from the list of products.
Click Search, then click Privileged Account Manager 3.1.
This displays the current hotfix.
Download Privileged Account Manager 3.1 HF1.
Extract and publish packages into the Framework:
Copy the netiq-npam-packages-3.1-HF1.tar.gz file to any of the Privileged Account Manager machines.
Extract netiq-npam-packages-3.1-HF1.tar.gz into a temporary location, for example, /tmp/framework/ directory.
tar -xvf netiq-npam-packages-3.1-HF1.tar.gz
Use the following command to publish the packages to the Package Manager.
Replace <admin> with the name of your admin user.
For Linux and UNIX platforms:
/opt/netiq/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework
NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:
/opt/novell/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework
For Windows platforms:
c:\Program Files\netiq\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework
NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:
c:\Program Files\novell\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework
When prompted, enter the name and password for the administrator.
To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.
During the process of installing the packages through the Framework, you can create a backup of the existing packages that are being replaced. To create the backup, you need to leave the Create backup option enabled when installing the hotfix. Then if you want to remove the update, you can use the Rollback Packages option.
You can choose to install the hotfix on all hosts or on selected hosts.
Log in to the Framework Manager console.
To install the hotfix on all hosts (if you want to install the hotfix on only selected hosts, skip to Step 3):
On the Home page, click Hosts.
Select the root domain.
In the left pane, select Update Domain Packages.
Select the desired packages for the respective hosts.
Click Next.
Click Finish.
To install the hotfix on selected hosts:
Click Hosts > Update Packages on the home page of the console.
Select the desired packages for the respective hosts.
Click Next.
Click Finish.
NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. There are no new known issues in this release and for the existing known issues that are currently being researched, see Known Issues in the NetIQ Privileged Account Manager 3.1 Release Notes. For further assistance contact Technical Support.
Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.
For detailed contact information, see the Support Contact Information website.
For general corporate and product information, see the NetIQ Corporate website.
For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.
For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.
Copyright © 2016 NetIQ Corporation. All Rights Reserved.