Previous Topic: Configure an Endpoint for Advanced Policy Management

Next Topic: Customizing CA Access Control

Configure a UNIX Endpoint for Reporting

Once you have CA Access Control Endpoint Management and the Report Portal installed and configured, you can configure your endpoints to send data to the Distribution Server for processing by enabling and configuring the Report Agent.

Note: When you install CA Access Control, it lets you configure the endpoint for reporting. This procedure illustrates how you configure an existing endpoint for sending reports if you did not configure this option at install time.

To configure a UNIX endpoint for reporting

  1. Run ACSharedDir/lbin/report_agent.sh:
    report_agent config -server hostname [-proto {ssl|tcp}] [-port port_number [-rqueue queue_name]
    

    If you omit any configuration options, the default setting is used.

    Note: For more information on the report_agent.sh script, see the Reference Guide.

  2. Create a +reportagent user in database.

    This user should have ADMIN and AUDITOR attributes and write access to local terminal. You should also set epassword to the Report Agent Shared Secret (which you defined when you installed the Distribution Server).

  3. Create a SPECIALPGM for the Report Agent process.

    The SPECIALPGM maps the root user to the +reportagent user.

Note: After you enable the Report Agent, you can modify CA Access Control configuration settings to change performance-related settings. For more information on Report Agent configuration settings, see the Reference Guide.

Example: Configure a UNIX Endpoint for Reporting Using selang

The following selang commands show you how, assuming you enabled and configured the Report Agent, you create the required Report Agent user and specify special security privileges for the Report Agent process:

eu +reportagent admin auditor logical epassword(Report_Agent) nonative
auth terminal (terminal101) uid( +reportagent) access(w)
er specialpgm (/opt/CA/AcessControl/bin/ReportAgent) Seosuid(+reportagent) \
Nativeuid(root) pgmtype(none)

More information:

ReportAgent