NetIQ Privileged Account Manager 3.5 P1 resolves some of the previous issues.
Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Privileged Account Manager Community Support Forum on NetIQ Communities, our online community that also includes product information, blogs, and links to helpful resources.
The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click the comment icon on any page in the HTML version of the documentation posted at the Privileged Account Manager Documentation website. To download this product, see the NetIQ Downloads website.
The following section outlines the issue resolved in this release:
Privileged Account Manager 3.5 P1 resolves the Privileged Account Manager Unauthenticated Access security vulnerability (CVE-2018-1343) in the Linux platform.
For information about hardware requirements, supported operating systems, and browsers, see Technical Information website.
Before installing this patch update, ensure the following:
Privileged Account Manager must be on version 3.5 or later. To upgrade from versions prior to 3.5, you must first upgrade to 3.5. To install this patch, follow the instructions in Publishing the Packages on the Package Manager and Installing the Packages on Host Machines.
For more information about upgrading to Privileged Account Manager 3.5, see Upgrading Privileged Account Manager in the Privileged Account Manager Installation Guide.
Privileged Account Manager does not monitor active Windows sessions during this patch update. So, ensure that there are no active sessions during this patch update.
The modules (packages) updated in this patch are:
Framework Patch (spf-3-5-linux)
SSH Relay Agent (sshrelay-3-5-linux)
Installing the patch update includes publishing the packages on the Package Manager and installing the published packages to the Hosts.
You can publish the packages on the package manager in the following ways:
By configuring your system to use the NetIQ Customer Center (NCC) and use the Package Manager to distribute the packages. See Using Package Manager with NCC.
Download the patch update from the download site, install it on a local system, then use the Package Manager to distribute the packages. See Using Package Manager with a Local Server.
Configure the Package Manager by using the Novell Update Server:
Log in to the Administration console.
Click Package Manager > Settings.
From the drop-down, select Novell Update Server.
To view the update server information, select Advanced Settings.
Select the Packages check box.
Ensure that https is selected in the drop-down list.
Specify the entire URL for download as follows:
nu.novell.com/PUM/packages
Ensure that the port number is 443.
Leave the last text field blank since /PUM/Packages is already added in the previous text field.
NOTE:Ensure that you retain the default settings for other fields in this screen.
Click Finish.
For more details and alternate options to download packages to Package Manager, see Downloading Packages to Package Manager.
To push the packages to your host machines, continue with Installing the Packages on Host Machines.
Download the patch update manually:
On the NetIQ Downloads site, select the Basic Search tab.
On the right pane, select Search Patches.
On the Patch Finder page, select Privileged User Manager from the list of products.
Click Search, then click Privileged Account Manager 3.5.
This displays the current patch update.
Download all the Superseded Patches and Current Patches for Privileged Account Manager.
Repeat the following steps in a sequential order:
Copy the netiq-npam-packages-3.5.0.x.tar.gz file to any of the Privileged Account Manager machines.
Extract netiq-npam-packages-3.5.0.x.tar.gz into a temporary location, for example, /tmp/framework/ directory.
tar -xvf netiq-npam-packages-3.5.0.x.tar.gz
Use the following command to publish the packages to the Package Manager:
Replace <admin> with the name of your admin user.
For Linux and UNIX platforms:
/opt/netiq/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework
For Windows platforms:
c:\Program Files\netiq\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework
When prompted, enter the name and password for the administrator.
To push the packages to your host machines, continue with Installing the Packages on Host Machines.
Prerequisite
Before installing the patch update, disconnect all the Privileged Account Manager sessions to the host on which you are installing this patch.
You can install the updated packages on all the hosts or selected hosts in the following ways:
You can install the packages on a Windows, LINUX, or UNIX through command line. For more information about the commands for installing the updated packages, see Upgrade and Rollback Packages section in the Privileged Account Manager Administration Guide.
When you are installing the packages through the Administration Console, you can create a backup of the existing packages that you are replacing. To create the backup, you need to leave the Create backup option enabled when installing the patch update. Then, if you want to remove the update, you can use the Rollback Packages option.
When you are installing the packages through the Administration Console, you must first install the Framework Patch (spf) and then install other updated packages. Thus, these updated packages are listed in the Host Console only after installing the Framework patch.
To install the packages, perform the following:
Log in to the Framework Manager console.
(Conditional) If you want to install the patch update on all the hosts, perform the following:
On the Home page of the console, click Hosts.
Select the root domain.
In the left pane, click Update Domain Packages.
Select the latest Framework Patch (spf), then click Next.
In the left pane, click Update Domain Packages.
Select all the listed packages, then click Next.
Click Finish.
Repeat Step e, f, and g till no more packages are listed.
(Conditional) If you want to install the patch update on selected hosts, perform the following:
On the Home page of the console, click Hosts.
Select the host on which you want to install this patch.
In the left pane, click Update Packages.
Select the latest Framework Patch (spf), then click Next.
In the left pane, click Update Packages.
Select all the listed packages, then click Next.
Click Finish.
Repeat Step e, f, and g till no more packages are listed.
NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Section 4.1, Privileged Single Sign-on is not Supported in Microsoft Edge
Section 4.2, Secure Shel Java Terminal Displays Random Characters Instead of the Typed Characters
Section 4.3, Unable to Refresh Data In Access page While Using Internet Explorer 11
Section 4.4, Time Zones Are Different In Reporting Console and Output
Section 4.6, Audit videos do not Play in Microsoft Edge Browser
Section 4.9, Newly Created Reports are not Listed Under My Views in Internet Explorer 11 Browser
Section 4.10, New sessions are not Updated in Session Table in Internet Explorer 11 browser
Section 4.12, The Run as privileged user Option Is Not Displayed on a Windows 2012 Server
Section 4.15, The Changes to the Syslog Settings Do Not Get Applied
Section 4.16, Cannot Uninstall Privileged Account Manager 3.2 Through Windows Add/Remove Programs
Section 4.17, NPAM Service Commands Does Not Work In SUSE Linux Enterprise Server 12 or Later
Workaround: Use Microsoft Internet Explorer 11 to enable Privilege Single Sign-on in browsers with Local Group Policy configured. (Bug 1079379)
Issue: SSH Java terminal displays random characters instead of the typed characters on Java SSH relay connection to certain network switches. (Bug 1086870)
Workaround: Use alternative SSH clients such as command line SSH or PuTTY, or MobaXterm, instead of Java SSH.
Issue: When you click Refresh in the Access page, the updated data is not displayed.(Bug 1095367)
Workaround: Click Refresh in Internet Explorer browser instead of Refresh in the Access page.
Issue: For certain Linux and Unix sessions, the time zone for Start Time is different in the Reporting Console and a playback of the session. (Bug 1041802)
Workaround: There is no workaround at this time.
Workaround: Install PAM License immediately after deploy PAM manager. If License is added later, re-register the agents after you add a new license. (Bug 1100050)
Workaround: Audit videos can be viewed in other supported browsers. (Bug 1037322)
Workaround: There is no workaround at this time.(Bug 1094124)
Issue: When you use Privileged Account Manager in Microsoft Edge of Firefox Quantum, after you install AAF 6.0, you are unable to enroll biometric devices. (Bug 1097960)
Workaround: There is no workaround for Firefox Quantum at this time. For the workaround while using Microsoft Edge, see .
Use browsers other than Internet Explorer 11. To view the list of supported browsers, see Technical Information website. (Bug 1100985)
Use browsers other than Internet Explorer 11. To view the list of supported browsers, see Technical Information website. (Bug 1100970)
Issue: Selecting and moving multiple objects by using the Shift/ Ctrl key does not work.
Workaround: There is no workaround at this time.(Bug 915307)
Issue: When you right-click Start on a Windows 2012 server, the Run as privileged user option does not get displayed. (Bug 901032)
Workaround: To workaround this issue, right-click the application in the folder where the application is installed to execute Run as privileged user.
Issue: When Command Control Objects are added simultaneously in large numbers, the objects do not appear in the console. This is an intermittent behavior. (Bug 908307)
Workaround: There is no workaround at this time.
Issue: In the administration console, when you search for unregistered hosts by clicking Hosts > List Unregistered Hosts > IP Range, the Failed to list unregistered agents error is displayed. (Bug 832747)
Workaround: Ensure that when you install Agents, you register it with the Manager for Privileged Account Manager.
Issue: In the Reporting console of Privileged Account Manager when you save the changes to syslog settings, such as select SSL, or Allow Persistent Connections, the changes are not applied. (Bug 895993)
Workaround: To workaround this issue, restart Privileged Account Manager.
Issue: Uninstalling Privileged Account Manager 3.2 through Windows Add/Remove Programs displays an error. This issue occurs only when the Privileged Account Manager is upgraded to 3.2 using Privileged Account Manager 3.2 installer. (Bug 1029461)
Workaround: Uninstall Privileged Account Manager through command line or Privileged Account Manager 3.2 installer.
Issue: The NPAM service commands such as start, stop, restart and status does not work in SUSE Linux Enterprise Server 12 or later. (Bug 1041284)
Workaround: To workaround this issue, perform one of the following:
Reboot the system using the following command:
reboot
(or)
shutdown -r now
Kill and restart the NPAM process using the following command:
pkill unifid
/etc/init.d/npum start
After performing one of the preceding steps, you can verify the NPAM process running status by executing the following command:
/etc/init.d/npum status
Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.
For detailed contact information, see the Support Contact Information website.
For general corporate and product information, see the NetIQ Corporate website.
For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.
For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.
© Copyright 2009-2018 Micro Focus or one of its affiliates. All Rights Reserved.