Complete the Installation
After you finish making menu choices, do the following to complete the installation:
- Use the c command to continue the installation.
- A prompt asks if all of the installation settings are correct. If they are correct, then specify y. If they are not correct, then specify n, make the necessary changes, and continue the previous step.
- A prompt asks if you want to view the installation script. Choose n.
This option is intended for troubleshooting by BeyondTrust Technical Support; the generated installation script contains thousands of lines of code.
- A prompt asks if you want to install the product now. Press Enter to accept the default of y.
- The installation script now executes and installs Endpoint Privilege Management for Unix and Linux components on this machine.
- If an Endpoint Privilege Management for Unix and Linux policy file exists, it is not modified. If you do not have a policy file, then create a policy file using the following command:
touch /opt/pbul/policies/pb.conf
An empty policy file rejects all Endpoint Privilege Management for Unix and Linux commands. For information about writing policy files, see the Endpoint Privilege Management for Unix and Linux Policy Language Guide.
- Change the permissions on the policy file so that it can be read by root only:
chmod 600 /opt/pbul/policies/pb.conf
The installation is now complete.
Example of a pbinstall Execution
The following is an example of a pbinstall execution:
/usr/local/lib/pbbuilder will be created as part of the installation
/etc/pb.key exists.. taking a copy...
Checking disk space...
... mountpoints are
/ /dev /net/build/build /net/nethome/nethome/tmp
/net/nethome/nethome/user /pbis
... local mount points are
/ /dev
Mount Point Needed Available Flag
/ 27117 359448716 works
Disk Free space on selected mountpoints appears to be okay.
Are all the installation settings correct [yes]? Creating the installation script:
'/opt/symark/powerbroker/v8.0/pbx86_64_linuxA-8.0.0-06/install/PowerBroker_ Install'
An install script has been made that will install BeyondTrust Endpoint Privilege Management
according to your settings. View the install script [no]?
Install BeyondTrust Endpoint Privilege Management for Unix and Linux now [yes]?
Executing '/opt/symark/powerbroker/v8.0/pbx86_64_linuxA-8.0.0- 06/install/PowerBroker_Install'
Creating settings file /etc/pb.settings
Removing PowerBroker service definitions (if any) from /etc/services. Adding PowerBroker service definitions to /etc/services.
Removing any PowerBroker definitions from SuperDaemon xinetd file
/etc/xinetd.conf
Adding PowerBroker definitions to SuperDaemon configurations /etc/xinetd.conf. Installed /usr/lib/beyondtrust/pb/libcom_err.so.3.0
Installed /usr/lib/beyondtrust/pb/libgssapi_krb5.so.2.2 Installed /usr/lib/beyondtrust/pb/libk5crypto.so.3.0 Installed /usr/lib/beyondtrust/pb/libkrb5.so.3.2 Installed /usr/lib/beyondtrust/pb/libcrypto.so.0.9.8 Installed /usr/lib/beyondtrust/pb/libssl.so.0.9.8 Installed /usr/lib/beyondtrust/pb/liblber-2.3.so.0.2.12 Installed /usr/lib/beyondtrust/pb/libLDAP-2.3.so.0.2.12 Installed /usr/lib/beyondtrust/pb/libcurl.so.4.3.0
Created symbolic link /usr/lib/beyondtrust/pb/libcom_err.so.3 Created symbolic link /usr/lib/beyondtrust/pb/libcom_err.so Created symbolic link /usr/lib/beyondtrust/pb/libgssapi_krb5.so.2 Created symbolic link /usr/lib/beyondtrust/pb/libgssapi_krb5.so Created symbolic link /usr/lib/beyondtrust/pb/libk5crypto.so.3 Created symbolic link /usr/lib/beyondtrust/pb/libk5crypto.so Created symbolic link /usr/lib/beyondtrust/pb/libkrb5.so.3
Created symbolic link /usr/lib/beyondtrust/pb/libkrb5.so Created symbolic link /usr/lib/beyondtrust/pb/libcrypto.so.0 Created symbolic link /usr/lib/beyondtrust/pb/libcrypto.so Created symbolic link /usr/lib/beyondtrust/pb/libssl.so.0 Created symbolic link /usr/lib/beyondtrust/pb/libssl.so
Created symbolic link /usr/lib/beyondtrust/pb/liblber-2.3.so.0 Created symbolic link /usr/lib/beyondtrust/pb/liblber-2.3.so Created symbolic link /usr/lib/beyondtrust/pb/libLDAP-2.3.so.0 Created symbolic link /usr/lib/beyondtrust/pb/libLDAP-2.3.so Created symbolic link /usr/lib/beyondtrust/pb/libcurl.so.4 Created symbolic link /usr/lib/beyondtrust/pb/libcurl.so Installed pbrun as /usr/local/bin/pbrun
Installed /usr/local/man/man1/pbrun.1 Installed pbssh as /usr/local/bin/pbssh Installed /usr/local/man/man1/pbssh.1 Installed pbrunssh as /usr/local/bin/pbrunssh Installed pbmasterd as /usr/sbin/pbmasterd Installed /usr/local/man/man8/pbmasterd.8
Installed pbfwdevents as /usr/sbin/pbfwdevents Installed /usr/local/man/man8/pbfwdevents.8 Installed pblocald as /usr/sbin/pblocald Installed /usr/local/man/man8/pblocald.8 Installed pblogd as /usr/sbin/pblogd
Installed /usr/local/man/man8/pblogd.8 Installed pbguid as /usr/sbin/pbguid Installed /usr/local/man/man8/pbguid.8 Installed pbsyncd as /usr/sbin/pbsyncd Installed /usr/local/man/man8/pbsyncd.8 Installed pbencode as /usr/sbin/pbencode Installed /usr/local/man/man8/pbencode.8 Installed pbhostid as /usr/sbin/pbhostid Installed /usr/local/man/man8/pbhostid.8 Installed pblicense as /usr/sbin/pblicense Installed /usr/local/man/man8/pblicense.8 Installed pbpasswd as /usr/sbin/pbpasswd Installed /usr/local/man/man8/pbpasswd.8 Installed pbsum as /usr/sbin/pbsum Installed /usr/local/man/man8/pbsum.8
Installed pbbench as /usr/local/bin/pbbench Installed /usr/local/man/man1/pbbench.1 Installed pbcheck as /usr/sbin/pbcheck Installed /usr/local/man/man8/pbcheck.8 Installed pbcall as /usr/local/bin/pbcall Installed pbless as /usr/local/bin/pbless Installed /usr/local/man/man1/pbless.1 Installed pbmg as /usr/local/bin/pbmg Installed /usr/local/man/man1/pbmg.1 Installed pbnvi as /usr/local/bin/pbnvi Installed /usr/local/man/man1/pbnvi.1 Installed pbumacs as /usr/local/bin/pbumacs Installed /usr/local/man/man1/pbumacs.1 Installed pbvi as /usr/local/bin/pbvi Installed /usr/local/man/man1/pbvi.1 Installed pbkey as /usr/sbin/pbkey
Installed /usr/local/man/man8/pbkey.8 Installed pblog as /usr/sbin/pblog Installed /usr/local/man/man8/pblog.8 Installed pbreplay as /usr/sbin/pbreplay Installed /usr/local/man/man8/pbreplay.8 Installed pbmerge as /usr/sbin/pbmerge Installed /usr/local/man/man8/pbmerge.8 Installed pbsync as /usr/sbin/pbsync Installed /usr/local/man/man8/pbsync.8 Installed pbping as /usr/sbin/pbping Installed /usr/local/man/man8/pbping.8 Installed pbprint as /usr/sbin/pbprint Installed /usr/local/man/man8/pbprint.8 Installed pbksh as /usr/local/bin/pbksh Installed pbsh as /usr/local/bin/pbsh Installed pbreport as /usr/sbin/pbreport Installed /usr/local/man/man8/pbreport.8 Installed pbuvqrpg as /usr/sbin/pbuvqrpg Installed /usr/local/man/man8/pbuvqrpg.8 Installed pbversion as /usr/sbin/pbversion Installed /usr/local/man/man8/pbversion.8 Installed /usr/local/man/man8/pbinstall.8 Installed /usr/local/man/man8/pbuninstall.8
Installed /usr/local/man/man8/pbmakeremotetar.8 Installed /usr/local/man/man8/pbpatchinstall.8
Placing policy examples in '/usr/local/lib/pbbuilder'
Placing pbguid html help files in '/usr/local/lib/pbbuilder' Installing /etc/pb.key
Reloading SuperDaemon Configurations...
Done Reloading SuperDaemon Configurations...
------------------------------------------------------------------------------------
Installing default role-based policy pbul_policy.conf and pbul_functions.conf in /opt/pbul/policies
The main policy pbul_policy.conf will be included in /opt/pbul/policies/pb.conf
Installed pbul_policy.conf as /opt/pbul/policies/pbul_policy.conf
------------------------------------------------------------------------------------
You will have to edit the /opt/pbul/policies/pb.conf file now.
Installed pblighttpd as /usr/lib/beyondtrust/pb/rest/sbin/pblighttpd Installed pblighttpd-svc as /usr/lib/beyondtrust/pb/rest/sbin/pblighttpd-svc Installed /usr/lib/beyondtrust/pb/rest/lib/mod_access.so
Installed /usr/lib/beyondtrust/pb/rest/lib/mod_dirlisting.so Installed /usr/lib/beyondtrust/pb/rest/lib/mod_fastcgi.so Installed /usr/lib/beyondtrust/pb/rest/lib/mod_indexfile.so Installed /usr/lib/beyondtrust/pb/rest/lib/mod_staticfile.so Installed /usr/lib/beyondtrust/pb/rest/..//pbsudoers_server.so
Installed pbconfigd as /usr/lib/beyondtrust/pb/rest/sbin/pb900pbconfigd Installed pbrestcall as /usr/sbin/pbrestcall
Starting pblighttpd-svc service.BeyondTrust Endpoint Privilege Management for Unix and Linux Installation terminated successfully.
pbmakeremotetar Installation Script
Deployment of Endpoint Privilege Management for Unix and Linux across multiple machines of the same platform type can be simplified by cloning the installations. Installation cloning is done by making a remote tarball using pbmakeremotetar, a menu-driven, interactive installation script.
pbmakeremotetar Installation Information
The section contains information about running an example pbmakeremotetar installation.
- pbmakeremotetar is used to clone an installed copy of Endpoint Privilege Management for Unix and Linux so it can be quickly installed on other hosts that use the same Endpoint Privilege Management for Unix and Linux flavor. The directory structure on the target systems must also be the same as on the host that is running pbmakeremotetar.
- pbmakeremotetar properly configures (as appropriate) /etc/services and the superdaemon configuration files (/etc/inetd.conf, /etc/xinetd.conf, or SMF).
- For Policy Server target installations, an initial installation (not a remote installation) must be done before any target remote installation. Doing so ensures that all licensing issues are handled properly.
- Different target system installation working directories should be used for different prefix and/or suffix versions of cloned installations.
- pbmakeremotetar scans the main policy file (by default /opt/pbul/policies/pb.conf from v9.4.3+ and /etc/pb.conf prior to v9.4.3) for included policy files and includes them in the tarball. If the main policy file is encrypted, pbmakeremotetar is not able to scan it for included policy files. Therefore, if the main policy file is encrypted, you must do one of the following:
- Restore the unencrypted policy file before running the pbmakeremotetar installation script.
- Specify each encrypted policy file in the editor session after answering y to the Do you wish to make changes to this list? prompt:
- Manually move the encrypted files to the target systems.
- For pbmakeremotetar/pbremoteinstall installations where integration with AD Bridge is desired, if AD Bridge is configured on the system where the Endpoint Privilege Management for Unix and Linux instance is cloned, when the cloned instance is installed, if the AD Bridge libraries are missing, then a warning message is displayed.
Remote Installations Using pbmakeremotetar
Remote installations using pbmakeremotetar perform the following three basic steps:
- Execute pbmakeremotetar.
- Make the created tar file available to the target system.
- Unarchive the tar file and execute remote_unpack from that tar file.
Example of a pbmakeremotetar Execution
The following is an example of a pbmakeremotetar execution:
# ./pbmakeremotetar -a /opt/beyondtrust/pb.tar
Starting pbmakeremotetar main() from /opt/beyondtrust/powerbroker/v6.0/pbx86_ linuxB-6.0.0-01/install/.
pbmakeremotetar
This command is used to duplicate the current system's installation of BeyondTrust Endpoint Privilege Management for Unix and Linux to allow this duplication to be installed on one or more identically configured systems.
x86_linuxB
Hit return or enter to continue...
Checking tar command for needed switches...
Done checking tar command for needed switches...
Making file /opt/beyondtrust/pb.tar for architecture x86_linuxB Reading /etc/pb.cfg
Current additional files for deployment: [displays list of files]
Do you wish to make changes to this list [no]?
Building encapsulated tarball
/etc/pb.cfg
/etc/pb.conf
/etc/pb.key
/etc/pb.settings
/etc/pb.key
/opt/beyondtrust/powerbroker/v6.0/pbx86_linuxB-6.0.0-01/install/./pb.keyfiles
/opt/beyondtrust/powerbroker/v6.0/pbx86_linuxB-6.0.0- 01/install/./pbremoteinstall
/opt/beyondtrust/powerbroker/v6.0/pbx86_linuxB-6.0.0-01/install/./pb_install_
support
/opt/beyondtrust/powerbroker/v6.0/pbx86_linuxB-6.0.0- 01/install/./pbmakeremotetar
/opt/beyondtrust/powerbroker/v6.0/pbx86_linuxB-6.0.0-01/install/./pbuninstall
/opt/beyondtrust/powerbroker/v6.0/pbx86_linuxB-6.0.0-01/install/./sy_install_ support
/usr/lib/symark/pb/.BeyondTrustCreated
/usr/lib/symark/pb/.pbinstalls
/usr/lib/symark/pb/libcom_err.so
/usr/lib/symark/pb/libcom_err.so.3
/usr/lib/symark/pb/libcom_err.so.3.0
/usr/lib/symark/pb/libcrypto.so
/usr/lib/symark/pb/libcrypto.so.0
/usr/lib/symark/pb/libcrypto.so.0.9.7
/usr/lib/symark/pb/libgssapi_krb5.so
/usr/lib/symark/pb/libgssapi_krb5.so.2
/usr/lib/symark/pb/libgssapi_krb5.so.2.2
/usr/lib/symark/pb/libk5crypto.so
/usr/lib/symark/pb/libk5crypto.so.3
/usr/lib/symark/pb/libk5crypto.so.3.0
/usr/lib/symark/pb/libkrb5.so
/usr/lib/symark/pb/libkrb5.so.3
/usr/lib/symark/pb/libkrb5.so.3.2
/usr/lib/symark/pb/liblber-2.3.so
/usr/lib/symark/pb/liblber-2.3.so.0
/usr/lib/symark/pb/liblber-2.3.so.0.2.12
/usr/lib/symark/pb/libLDAP-2.3.so
/usr/lib/symark/pb/libLDAP-2.3.so.0
/usr/lib/symark/pb/libLDAP-2.3.so.0.2.12
/usr/lib/symark/pb/libssl.so
/usr/lib/symark/pb/libssl.so.0
/usr/lib/symark/pb/libssl.so.0.9.7
/usr/local/bin/pbbench
/usr/local/bin/pbcall
/usr/local/bin/pbksh
/usr/local/bin/pbless
/usr/local/bin/pbmg
/usr/local/bin/pbnvi
/usr/local/bin/pbrun
/usr/local/bin/pbsh
/usr/local/bin/pbumacs
/usr/local/bin/pbvi
/usr/local/man/man1/pbbench.1
/usr/local/man/man1/pbless.1
/usr/local/man/man1/pbmg.1
/usr/local/man/man1/pbnvi.1
/usr/local/man/man1/pbrun.1
/usr/local/man/man1/pbumacs.1
/usr/local/man/man1/pbvi.1
/usr/local/man/man8/pbcheck.8
/usr/local/man/man8/pbencode.8
/usr/local/man/man8/pbguid.8
/usr/local/man/man8/pbhostid.8
/usr/local/man/man8/pbkey.8
/usr/local/man/man8/pblicense.8
/usr/local/man/man8/pblocald.8
/usr/local/man/man8/pblog.8
/usr/local/man/man8/pblogd.8
/usr/local/man/man8/pbmasterd.8
/usr/local/man/man8/pbmerge.8
/usr/local/man/man8/pbpasswd.8
/usr/local/man/man8/pbprint.8
/usr/local/man/man8/pbreplay.8
/usr/local/man/man8/pbreport.8
/usr/local/man/man8/pbsum.8
/usr/local/man/man8/pbsync.8
/usr/local/man/man8/pbsyncd.8
/usr/local/man/man8/pbuvqrpg.8
/usr/sbin/pbcheck
/usr/sbin/pbencode
/usr/sbin/pbhostid
/usr/sbin/pbkey
/usr/sbin/pblocald
/usr/sbin/pblog
/usr/sbin/pblogd
/usr/sbin/pbmasterd/usr/sbin/pbmerge
/usr/sbin/pbpasswd
/usr/sbin/pbprint
/usr/sbin/pbreplay
/usr/sbin/pbreport
/usr/sbin/pbsum
/usr/sbin/pbsync
/usr/sbin/pbsyncd
/usr/sbin/pbuvqrpg
Building encapsulating tarball remote_unpack
pb.tar.tar
/opt/beyondtrust/pb.tar has been built
Make the Tar File Available to the Remote System
To make the tar file available to the remote system, you can use FTP (image mode), NFS, or any other mechanism as long as the security and integrity of the binary tar file are maintained.
If tar –x warns about a directory checksum error, then the tar file archive may be corrupt because it was copied in ASCII, not binary (or image) mode.
Untar the Remote Archive and Execute remote_unpack
When the tar file is made available to the remote system, a temporary working directory must be selected to unarchive the remote archive. An installation work directory other than /tmp should be selected (for the same reasons as with pbinstall). Unpacking the archive makes the encapsulated tar archive and a script called remote_unpack visible.
The remote_unpack script then executes. This script unpacks the encapsulated tar file (putting the files in their required places) and reconfigures the system files (/etc/services and the superdaemon configuration) for Endpoint Privilege Management for Unix and Linux.
The following listing shows an example execution of the remote_unpack script:
# cd {workingdirectory}
# tar -xvf {tarfilename}.tar
x remote_unpack, 1250 bytes, 3 tape blocks
x tarfilename.tar.tar, 48152576 bytes, 94048 tape blocks
# ./remote_unpack
Deploying executable files...
x /usr/local/bin/pbrun, 4282296 bytes, 8364 tape blocks x /usr/local/man/man1/pbrun.1, 2852 bytes, 6 tape blocks
x /usr/local/bin/pbbench, 3414416 bytes, 6669 tape blocks x /usr/local/man/man1/pbbench.1, 1152 bytes, 3 tape blocks x /usr/local/bin/pbless, 178964 bytes, 350 tape blocks
x /usr/local/man/man1/pbless.1, 743 bytes, 2 tape blocks x /usr/local/bin/pbmg, 52 bytes, 1 tape blocks
x /usr/local/man/man1/pbmg.1, 809 bytes, 2 tape blocks x /usr/local/bin/pbumacs, 52 bytes, 1 tape blocks
x /usr/local/man/man1/pbumacs.1, 832 bytes, 2 tape blocks x /usr/local/bin/pbvi, 212000 bytes, 415 tape blocks
x /usr/local/man/man1/pbvi.1, 1107 bytes, 3 tape blocks x /usr/local/bin/pbcall, 3585880 bytes, 7004 tape blocks x /usr/sbin/pblocald, 4714020 bytes, 9208 tape blocks
x /usr/local/man/man8/pblocald.8, 1525 bytes, 3 tape blocks x /usr/sbin/pbcheck, 4202964 bytes, 8209 tape blocks
x /usr/local/man/man8/pbcheck.8, 2824 bytes, 6 tape blocks x /usr/sbin/pbhostid, 191596 bytes, 375 tape blocks
x /usr/local/man/man8/pbhostid.8, 815 bytes, 2 tape blocks x /usr/sbin/pbkey, 187548 bytes, 367 tape blocks
x /usr/local/man/man8/pbkey.8, 1113 bytes, 3 tape blocks x /usr/sbin/pblog, 3836692 bytes, 7494 tape blocks
x /usr/local/man/man8/pblog.8, 5346 bytes, 11 tape blocks x /usr/sbin/pbpasswd, 186536 bytes, 365 tape blocks
x /usr/local/man/man8/pbpasswd.8, 1413 bytes, 3 tape blocks x /usr/sbin/pbreplay, 3550320 bytes, 6935 tape blocks
x /usr/local/man/man8/pbreplay.8, 3522 bytes, 7 tape blocks x /usr/sbin/pbsum, 77872 bytes, 153 tape blocks
x /usr/local/man/man8/pbsum.8, 853 bytes, 2 tape blocks x /usr/sbin/pbencode, 3163940 bytes, 6180 tape blocks
x /usr/local/man/man8/pbencode.8, 927 bytes, 2 tape blocks x /usr/sbin/pbmasterd, 5505740 bytes, 10754 tape blocks
x /usr/local/man/man8/pbmasterd.8, 1578 bytes, 4 tape blocks x /usr/sbin/pblogd, 3956552 bytes, 7728 tape blocks
x /usr/local/man/man8/pblogd.8, 1015 bytes, 2 tape blocks x /usr/sbin/pbguid, 6537648 bytes, 12769 tape blocks
x /usr/local/lib/pbbuilder/.BeyondTrustCreated, 29 bytes, 1 tape blocks x /usr/local/lib/pbbuilder/fileselect.html, 1075 bytes, 3 tape blocks
x /usr/local/lib/pbbuilder/iolog.html, 2346 bytes, 5 tape blocks x /usr/local/lib/pbbuilder/log.html, 1139 bytes, 3 tape blocks
x /usr/local/lib/pbbuilder/settings.html, 23014 bytes, 45 tape blocks x /usr/local/lib/pbbuilder/variables.html, 34964 bytes, 69 tape blocks
x /usr/local/lib/pbbuilder/.BeyondTrustCreated, 29 bytes, 1 tape blocks x /usr/local/lib/pbbuilder/fileselect.html, 1075 bytes, 3 tape blocks
x /usr/local/lib/pbbuilder/iolog.html, 2346 bytes, 5 tape blocks x /usr/local/lib/pbbuilder/log.html, 1139 bytes, 3 tape blocks
x /usr/local/lib/pbbuilder/settings.html, 23014 bytes, 45 tape blocks x /usr/local/lib/pbbuilder/variables.html, 34964 bytes, 69 tape blocks
x /opt/beyondtrust/pb/install/pbremoteinstall, 3362 bytes, 7 tape blocks
x /opt/beyondtrust/pb/install/pbmakeremotetar, 14650 bytes, 29 tape blocks x /opt/beyondtrust/pb/install/pbuninstall, 11565 bytes, 23 tape blocks
x /opt/beyondtrust/pb/install/pb_install_support, 13212 bytes, 26 tape blocks
x /opt/beyondtrust/pb/install/sy_install_support, 93560 bytes, 183 tape blocks
x /opt/beyondtrust/pb/install/platform, 5971 bytes, 12 tape blocks x /etc/pb.key, 1026 bytes, 3 tape blocks
x /opt/beyondtrust/pb/install/pb.cfg, 1161 bytes, 3 tape blocks
x /opt/beyondtrust/pb/install/pb.cfg.sparc_solaris7, 2 bytes, 1 tape blocks x /opt/beyondtrust/pb/install/pb.cfg.default, 2 bytes, 1 tape blocks
x /etc/pb.settings, 1915 bytes, 4 tape blocks
x /usr/local/man/man8/pbinstall.8, 6047 bytes, 12 tape blocks x /usr/local/man/man8/pbuninstall.8, 2569 bytes, 6 tape blocks
x /usr/local/man/man8/pbmakeremotetar.8, 4239 bytes, 9 tape blocks x /etc/pb.conf, 202 bytes, 1 tape blocks
Configure System now? [yes]
Starting pbremoteinstall main() from /opt/beyondtrust//pb_xyzzy/pb/install Reading /opt/beyondtrust/pb/install/pb.cfg
Reading /opt/beyondtrust/pb/install/pb.cfg.sparc_solaris7 Reading /opt/beyondtrust/pb/install/pb.cfg.default
Removing PowerBroker service definitions (if any) from /etc/services. Removing PowerBroker service definitions (if any) from /etc/services. Adding PowerBroker service definitions to /etc/services.
Looking for SuperDaemons to configure...
Finished looking for SuperDaemons to configure...
Removing any PowerBroker definitions from SuperDaemon inetd file
/etc/inetd.conf
Adding PowerBroker definitions to SuperDaemon configurations
/etc/inetd.conf.
Reloading SuperDaemon Configurations...
Done Reloading SuperDaemon Configurations...
/opt/beyondtrust/pb/install/pbremoteinstall ... Done
pbpatchinstall Installation Script
BeyondTrust occasionally releases patches to the Endpoint Privilege Management for Unix and Linux product that improve performance and fix problems. You install these patches with the pbpatchinstall installation script.
pbpatchinstall Installation Information
This section contains information about installing an Endpoint Privilege Management for Unix and Linux patch with the pbpatchinstall script.
pbpatchinstall determines the current release of Endpoint Privilege Management for Unix and Linux that is installed on the machine and whether the release is compatible with the current patch. Multiple patches can be installed.
Based on the type of Endpoint Privilege Management for Unix and Linux host that is installed on the machine (policy server host, submit host, log host, and so forth), pbpatchinstall copies only the appropriate files to the appropriate directories to replace the existing files. pbpatchinstall makes a backup copy of all replaced files. These backup files are then available to restore the original files if the patch needs to be removed.
All Endpoint Privilege Management for Unix and Linux daemons running a process during the patch installation should be stopped before using pbpatchinstall and restarted after using pbpatchinstall.
After you extract an Endpoint Privilege Management for Unix and Linux patch tarball file, the patch version becomes part of the directory path. For example, in the patch directory: /opt/beyondtrust/powerbroker/v5.1/ pbx86_linuxA-5.1.2-03-sp1/install, the patch version is pbx86_linuxA-5.1.2-03-sp1.
The pbpatchinstall installation process performs the following:
- Inventories the Endpoint Privilege Management for Unix and Linux installation, using prefixes and/or suffixes (if any). Use the -p and/or -s arguments if you want pbpatchinstall to use prefixes and/or suffixes.
- Validates the existence and version of the Endpoint Privilege Management for Unix and Linux binary files that should be present for each component.
- Lists the Endpoint Privilege Management for Unix and Linux components that are currently installed.
The Endpoint Privilege Management for Unix and Linux patch release number must match the installed Endpoint Privilege Management for Unix and Linux release number. If the release numbers do not match, a prompt is displayed, stating that the patch release does not match the existing Endpoint Privilege Management for Unix and Linux release and asks if you want to install the patch release over the existing Endpoint Privilege Management for Unix and Linux release. To complete the installation, type y.
To run the patch installation without this prompt, use the -f argument.
Example of a pbpatchinstall Execution
The following is an example of a pbpatchinstall execution:
#pwd
/opt/beyondtrust/powerbroker/v5.1/pbx86_linuxB-5.1.1-03-sp1/install
# ./pbpatchinstall
Starting pbpatchinstall from /opt/beyondtrust/powerbroker/v5.1/pbx86_linuxB
-5.1.1-03-sp1/install/.x86_linuxB BeyondTrust PowerBroker Patch Installation
Checking MANIFEST against release directory Trying /etc/pb.settings
Settings are from file='/etc/pb.settings'
Reading /etc/pb.cfg
PowerBroker version 5.1.0-08 established from /etc/pb.cfg PowerBroker components currently installed:
run_host submit_host log_synchronization secure_gui_host utilities
pbksh log_sync_initiator
All installed binaries match Endpoint Privilege Management for Unix and Linux version 5.1.0-08 Version is not evaluated for binaries pbuvqrpg and pbnvi.
Patch release 5.1.1 does not match Endpoint Privilege Management for Unix and Linux release 5.1.0
Install PowerBroker patch release 5.1.1 over Endpoint Privilege Management for Unix and Linux release 5.1.0? [no] y Checking disk space...
... mountpoints are
/ /boot /data /dev /net/nethome/nethome/user
... local mount points are
/ /boot /data /dev
Mount Point Needed Available Flag
/ 1024 2921852 works
/data 2590 126953328 works
Disk Free space on selected mountpoints appears to be okay. Patched /usr/sbin/pbencode installed.
Patched /usr/local/bin/pbbench installed. Patched /usr/local/bin/pbrun installed. Patched /usr/sbin/pbreport installed. Patched /usr/local/bin/pbksh installed.
6 files patched, replaced files moved to /opt/beyondtrust/powerbroker/v5.1/pbx86_linuxB-5.1.1-03- sp1/bin_patchbkp
NOTE: In order to remove patch, directory /opt/beyondtrust/powerbroker/v5.1/pbx86_linuxB-5.1.1-
03-sp1/bin_patchbkp must be left in place.
/etc/pb.cfg updated with patch information. 5.1.1-03-sp1 patches installed.
