Prerequisites

Consider the following before configuring the Linux connector.

  • SSH should be installed on the Linux computer
  • Aggregate the sudo user's permissions:

    • The administrator user must have rights to execute the /usr/bin/awk command.

      Update the /etc/sudoers file entry for the administrator user with the /usr/bin/awk command.

    • Add new multi-valued schema attributes to the accounts and entitlement schemas as sudoCommands, which collect all the necessary user commands and stores them as a part of the attribute.
      • If you need to aggregate the sudoCommands from multiple sudo files, then you must provide a list of files as a separate configuration attribute. Separate each sudo file in the command with a comma (,).

        For example:

        • key – sudoCmdFiles

        • value – /etc/sudoers.d/special_user.conf,/etc/sudoers.d/special_group.conf

        The default command which collects the sudo commands is as follows:

        awk '/^[^#]/' /etc/sudoers

        In the above command, the commented lines are skipped and the remaining content of the /etc/sudoers file are aggregated in to a temporary file on the Linux computer.

        If you want to provide a new command for aggregating file data, then you can configure it as a part of the application XML file.

        For example:

        key: sudoUserCommand and value : awk '/^[^#]/' /etc/sudoers

  • For Red Hat Enterprise Linux version 9.1 and later, ensure that service account has Bracketed paste mode disabled.

    To disable the bracketed paste mode for a specific user, add the following line to ~/.inputrc:

    set enable-bracketed-paste off