BeyondInsight Event and I/O Logging Common Settings

The settings in this section must be set, in addition to the settings described in BeyondInsight Event Logging and BeyondInsight I/O Log Indexing and Searching.

pbadminpath

  • Version 7.1 and earlier: pbadminpath setting not available.
  • Version 7.5 and later: pbadminpath setting available.

The path where admin binaries reside. This is used by pbmasterd and pblogd to forward events and iologs via pbreplay.

pbadminpath /usr/sbin/

No default value

  • Policy server hosts
  • Log hosts
  • GUI hosts

guiport

  • Version 7.1 and earlier: guiport setting not available.
  • Version 7.5 and later: guiport setting available.

Defines the TCP port number that is used for PBGUID. The port numbers for Privilege Management daemons must use the non-reserved system ports. The allowed port numbers are 1024 to 65535 (inclusive).

In a BeyondInsight integrated environment, this port number is used by the BeyondInsight Console to replay I/O logs.

guiport 24348
guiport 24348
  • Policy server hosts
  • Log hosts
  • GUI hosts

sguiport

  • Version 7.1 and earlier: sguiport setting not available.
  • Version 7.5 and later: sguiport setting available.

Defines the TCP port number that is used for the secure PBSGUID. The port numbers for Privilege Management daemons must use the non-reserved system ports. The allowed port numbers are 1024 to 65535 (inclusive).

In a BeyondInsight integrated and SSL-enabled environment, this secure port number is used by the BeyondInsight Console to replay I/O logs.

sguiport 24349
sguiport 24349
  • Policy server hosts
  • Log hosts
  • GUI hosts

sharedlibcurldependencies

  • Version 7.1 and earlier: sharedlibcurldependencies setting not available.
  • Version 7.5 and later: sharedlibcurldependencies setting available.

Defines the path and file name for libcurl used by the binaries to communicate with Solr server and/or BeyondInsight server. Setting sharedlibcurldependencies requires sharedlibkrb5dependencies and sharedlibssldependencies to be set.

The certificates used for BeyondInsight by Privilege Management for Unix & Linux need support for SHA-256 algorithm which was introduced in SSL v0.9.8. Therefore starting with v7.5, the SSL libraries shipped with Privilege Management for Unix and Linux Shared Libraries are SSL libraries v0.9.8. When installing or upgrading, sharedlibssldependencies need to be set to:
/usr/lib/symark/pb/libcrypto.so.0.9.8 /usr/lib/symark/pb/libssl.so.0.9.8
sharedlibcurldependencies /usr/lib/symark/pb/libcurl.so.4.3.0
  • AIX: /usr/lib/symark/pb/libcurl.a(libcurl.so.4)
  • HPUX PA-RISC: /usr/lib/symark/pb/libcurl.sl.7.0
  • HPUX Itanium: /usr/lib/symark/pb/libcurl.so.7.0
  • Linux, Solaris: /usr/lib/symark/pb/libcurl.so.4.3.0
  • macOS: Not applicable (static library).
  • Policy server hosts
  • Log hosts

loadcurllibs

  • Version 7.5 and earlier: loadcurllibs setting not available.
  • Version 7.5 and later: loadcurllibs setting available.

Forces the loading of libcurl libraries defined in sharelibcurldependencies.

loadcurllibs yes
loadcurllibs no
  • Policy server hosts
  • Log hosts