- [ver 6.2 and earlier]: pbcreatehpuxcfgpkg not available.
- [ver 6.2.1 and later]: pbcreatehpuxcfgpkg available.
pbcreatehpuxcfgpkg creates an HP-UX configuration depot for BeyondTrust Privilege Management. pbcreatehpuxcfgpkg is a script that can be run interactively or non-interactively. The script enables a user to build a BeyondTrust Privilege Management HP-UX configuration depot, which is loaded along with one or more BeyondTrust Privilege Management HP-UX component filesets.
Unlike the BeyondTrust HP-UX component depot, which is created and distributed by BeyondTrust, HP-UX configuration depots are created by the user. First, settings files must be created by running pbinstall with the -z argument. Settings files are created by default in directory install/settings_files, although the user can specify the directory. The user may optionally put a policy file pb.conf in the settings_files directory to be included in the configuration package. After the settings files have been created, user runs pbcreatehpuxcfgpkg from the Privilege Management for Unix and Linux install directory. pbcreatehpuxcfgpkg accepts the following arguments:
-d Set the component fileset dependency to hppaD rather than hppaB (default) -h Help (this message) and exit. -l Save (do not delete) depot build directory. -p User-specified name for the configuration fileset. -s Settings files directory location. -v Print version of pbcreatehpuxcfgpkg and exit.
If one or both of the -p and -s arguments are not supplied on the command line, the pbcreatehpuxcfgpkg script becomes interactive and prompts you for input. The -p argument, user-specified fileset name, enables you to specify the configuration fileset name. The name can be between 4 and 15 ASCII characters (inclusive), and can be A-Z, 0-9, and the hyphen (-). The first character cannot be a hyphen. For example, if you specify CLIENT-ASIA, the configuration fileset is named PowerBroker-Cfg[X].CLIENT-ASIA. If the length of the fileset name is more than 15 or less than 4 characters, or if a hyphen is the first character, then an error message is displayed, and you are again prompted for the fileset name.
The -s argument, settings files directory location, enables you to specify the directory that contains the settings files to be included in the configuration package. The default value is <pbinstall_directory>/settings_files.
If you want to include other Privilege Management for Unix and Linux installations keyfiles in the configuration depot, you must copy the keyfiles to the settings files directory prior to building the configuration depot.
If a Privilege Management for Unix and Linux policy server configuration depot is to be built, you can include an existing policy file pb.conf in the settings files directory prior to building the configuration depot. If pb.conf is not included, a new pb.conf is created and packaged containing the entry:
The optional -d argument, set component fileset dependency to hppaD rather than hppaB (default), enables you to generate a Privilege Management for Unix and Linux configuration depot that can be used for either hppaD or ia64A systems. If you do not use this option, then pbcreatehpuxcfgpkg creates a configuration depot that can be used for either hppaB or ia64A systems.
If you create configuration depots for different flavors, use the -p argument to specify different fileset names for each flavor.
The optional -l argument, save (do not delete) depot build directory, enables you to build the configuration depot and not remove the depot build directory, which is normally removed after the depot is built. The created depot can be found in the current (install) directory, and is the depot name. For example, PowerBroker-Cfg[X]-version.CLIENT-ASIA.depot, where the -p argument had been set to CLIENT-ASIA.
Upon running pbcreatehpuxcfgpkg, note that the script informs you as to which Privilege Management for Unix and Linux component filesets need to be installed on the target system. The Privilege Management for Unix and Linux configuration package installs the required component filesets if they are not already installed, provided they have been copied into the appropriate SD depot. HP-UX depots are copied into the desired SD depot using the swcopy command and are installed using the swinstall command.
Generates a configuration depot that has, as its dependencies, component filesets for hppaD (these component filesets can also be used on ia64A systems).
Without this argument, pbcreatehpuxcfgpkg generates a configuration depot that has, as its dependencies, component filesets for hppaB (which also can be used on ia64A systems).
Prints usage message and exits.
Saves (does not delete) package build directory.
User-specified name for the configuration fileset. The resulting fileset is PowerBroker-Cfg[X].depot-fileset-name.
The value of depot-fileset-name can be between 4 and 15 characters (inclusive), and allowed characters are A-Z, 0-9, and the hyphen (-); the first character cannot be a hyphen.
Settings files directory location.
Prints version of pbcreatehpuxcfgpkg and exits.
For more information, please see run_pbinstall.