This is to demonstrate how to install Privileged Identity Manager (PIM) "install_base" package under SSH session login as username "root" on linux X64.
Here the steps:
1)To download the "install_base"installation package under "tmp" folder on the linux X64 machine:
For instance "RO78593 TITLE: LINUX 64 BIT CM 12.8 SP1 ENDPOINT GA" at our link:
and here the result:
2)To "gunzip" and "untar" the package as follow:
# gunzip RO78593.tar.Z
# tar xvf RO78593.tar
./CA ControlMinder_12.8 SP1_README.HTML
3)To make the file "install_base" executable:
# chmod +x install_base
4)To install the Privileged Identity Manager (PIM) package:
Please refer to the file /tmp/pre_install/eACLicenseAgreementUNIX_english_cp1252.txt
for the license agreements governing the use of CA ControlMinder
and if you agree to the terms and conditions, enter the
command required to proceed with this installation.
The command is located within the license file provided
Enter the path for installing CA ControlMinder
Target Directory : /opt/CA/AccessControl
Source installation file(s) : /tmp/./_LINUX_X64_128.tar.Z
Group owner of files : 0
Interactive setup : yes
Saving install messages to : /opt/CA/AccessControl/AccessControl_install.log
Installing the following CA ControlMinder package(s):
- Client package
- Server package
For installation options, please use 'install_base -h'.
Select 'Y' to install, 'N' to exit the script:Y
Interactive setup procedure done.
The license will be installed in /opt/CA/SharedComponents.
successfully installed CAWIN
Setting permissions of bin/sepmd bin/sepmdadm lbin/sepmdd lbin/secrepsw bin/selogrcd.
Setting permissions of /opt/CA/AccessControl/man/man8/ files.
CA ControlMinder installed new configuration files for seosd.
The files are located in /opt/CA/AccessControl/etc.
You will also find in that directory files you had from
a previous CA ControlMinder installation.
Verify the new created files
Check seos.ini file for the right configuration.
The installation process messages are logged in /opt/CA/AccessControl/AccessControl_install.log.
Setting the owner, group and permissions of CA ControlMinder files.
Setting the setuid bit on the following binaries:
selock selockcom selogo segracex sepass sesudo secompas issec
Legal Notice: CA ControlMinder 128 may use JBoss Application Server v.4.2.3
and JBoss Native v.2.0.6, which are licensed under the Lesser General Public License (LGPL).
Copies of JBoss Application Server v.4.2.3, JBoss Native v.2.0.6 and the LGPL are provided
by a separate installation. Use of JBoss Application Server v.4.2.3 and
JBoss Native v.2.0.6 is subject to the terms of the LGPL as set forth in such installation.
Please refer to the log file for more information
5)To check Privileged Identity Manager (PIM) installed package:
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
VeRsIoN: 12.81-0 (1912) Compiled On:Feb 5 2015 23:21:51 i86PC
CA ControlMinder kernel extension is not loaded.
CA ControlMinder daemons are not running.
CA ControlMinder security daemon is not running.
CA ControlMinder watchdog daemon is not running.
CA ControlMinder agent daemon is not running.
CA ControlMinder serevu daemon is not running.
CA ControlMinder selogrd daemon is not running.
CA ControlMinder selogrcd daemon is not running.
CA ControlMinder eacws daemon is not running.
CA ControlMinder ReportAgent daemon is not running.
CA ControlMinder AgentManager daemon is not running.
CA ControlMinder policyfetcher daemon is not running.
CA ControlMinder KBLAudMgr daemon is not running.
CA ControlMinder auxiliary daemon is not running.
6)To start Privileged Identity Manager (PIM):
CA ControlMinder seload v220.127.116.112 - Loader Utility
Copyright (c) 2013 CA. All rights reserved.
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -pre
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -post
The token SEOS_syscall.LINUX_SeOS_Syscall_number, now set to '300'.
07 Jul 2015 16:54:16> WAKE_UP : Server going up
07 Jul 2015 16:54:16> INFO : Filter mask: 'WATCHDOG*' is registered
07 Jul 2015 16:54:16> INFO : Filter mask: 'INFO : Setting PV*' is registered
07 Jul 2015 16:54:16> INFO : Filter mask: 'INFO : DB*' is registered
07 Jul 2015 16:54:16> INFO : Filter mask: '*seosd.trace*' is registered
07 Jul 2015 16:54:16> INFO : Filter mask: '*FILE*secons*(*/log/*)*' is registered
Starting seosd. PID = 23370.
Checking database ...
Starting seagent. PID = 23377
seagent: Loading database image...
Starting seoswd. PID = 23384
seagent: Initialization phase completed