Previous Topic: Configure an Endpoint for Advanced Policy ManagementNext Topic: Customizing CA ControlMinder


Configure a UNIX Endpoint for Reporting

Once you have CA ControlMinder Endpoint Management and the Report Portal installed and configured, you can configure your endpoints to send data to the Distribution Server for processing by enabling and configuring the Report Agent.

Note: When you install CA ControlMinder, it lets you configure the endpoint for reporting. This procedure illustrates how you configure an existing endpoint for sending reports if you did not configure this option at install time.

To configure a UNIX endpoint for reporting

  1. Run ACSharedDir/lbin/report_agent.sh:
    report_agent config -server hostname [-proto {ssl|tcp}] [-port port_number [-rqueue queue_name]
    

    If you omit any configuration options, the default setting is used.

    Note: For more information on the report_agent.sh script, see the Reference Guide.

  2. Create a +reportagent user in database.

    This user should have ADMIN and AUDITOR attributes and write access to local terminal. You should also set epassword to the Report Agent Shared Secret (which you defined when you installed the Distribution Server).

  3. Create a SPECIALPGM for the Report Agent process.

    The SPECIALPGM maps the root user to the +reportagent user.

Note: After you enable the Report Agent, you can modify CA ControlMinder configuration settings to change performance-related settings. For more information on Report Agent configuration settings, see the Reference Guide.

Example: Configure a UNIX Endpoint for Reporting Using selang

The following selang commands show you how, assuming you enabled and configured the Report Agent, you create the required Report Agent user and specify special security privileges for the Report Agent process:

eu +reportagent admin auditor logical epassword(Report_Agent) nonative
auth terminal (terminal101) uid( +reportagent) access(w)
er specialpgm (/opt/CA/AcessControl/bin/ReportAgent) Seosuid(+reportagent) \
Nativeuid(root) pgmtype(none)