Prerequisites

• SSH should be installed on the Solaris computer.

• To use sudo users for SailPoint operation, ensure that the required packages for executing sudo commands are installed on the managed system.

• Sudo users and permissions for the Solaris connector:

  • The admin user must have rights to execute the /usr/bin/awk command.

  • You must update the /etc/sudoers file entry for the admin user with the /usr/bin/awk command.

  • The user and group schema must add a new multivalued schema attribute as sudoCommands that collects all the necessary user commands and stores them as a part of the attribute.

  • If you want to aggregate the sudo commands from multiple sudo files, you must provide the list of files as a separate configuration attribute in the source config.xml file.

    For example:

    <entry key="sudoCmdFiles" value="/etc/sudoers.d/special_user.conf,/etc/sudoers.d/special_group.conf"/>

  • The default command that collects the sudo commands is: awk '/^[^#]/' /etc/sudoers. In this command, the commented lines are skipped and the remaining content of the /etc/sudoers file is aggregated in a temporary file on the Solaris system.

    The temporary file on the Solaris system gets copied to the local SailPoint system and processes all the sudo user and group commands. If you want to use a custom command for aggregating file data, configure this command as part of the source config.xml file.

    For example:

    <entry key="sudoUserCommand" value="awk '/^[^#]/' /etc/sudoers"