Release Notes › Installation Considerations › UNIX Endpoint Installation Considerations

UNIX Endpoint Installation Considerations

This section describes items you should consider when installing CA ControlMinder on UNIX endpoints.

AIX 6.1 Requires TL3 or Later for CA ControlMinder to Start

Valid on AIX 6.1

To load CA ControlMinder on AIX 6.1, verify that TL3 or later is installed.

Message Queue for Linux390 Requires J2SE Version 5.0

To use Message Queue functionality on Linux s390 and s390x endpoints, verify that J2SE version 5.0 or later is installed on the endpoint. Message Queue functionality lets you send report data to the Report Portal and audit data to CA User Activity Reporting.

Note: You may need to configure the java_home configuration setting in the accommon.ini file. For more information, see the Implementation Guide.

Compatibility Library Missing on x86_64bit Linux

By default x86_64 Linux operating systems should not include 32bit compatibility libraries when installed. CA ControlMinder endpoint requires that the library libstdc++.so.6 exists under the usr/lib directory from rpm libstdc++.

Verify that this library exists on the endpoint before you install CA ControlMinder.

CA ControlMinder Installation and Uninstallation Restarts UNAB

When CA ControlMinder is installed or uninstalled from an endpoint that UNAB is running on, the UNAB agent, uxauthd, is stopped and started.

Propagating CA ControlMinder and UNAB to a New Solaris Zone

When you setup a new Solaris zone, you must complete several post installation steps before the native operating system completely propagate and run the post installation part of the package and you can propagate CA ControlMinder and UNAB to the new zone.

Note: For more information on setting up a new zone correctly, see Sun's System Administration Guide: Solaris Containers--Resource Management and Solaris Zones, which is available at the Sun Microsystems Documentation website.

Installing CA ControlMinder on Solaris 11 Limitation

Due to a Solaris 11 limitation, CA ControlMinder package is not propagated into nonglobal zones during installation. We recommend you to install CA ControlMinder in each zone individually using the Solaris native packaging tool (pkgadd).

CA ControlMinder on RHEL 7x86_64 Considerations

When you install CA ControlMinder on the RHEL 7x86_64 endpoint, the following limitations are applicable:

• RHEL 7x86_64 supports CA ControlMinder 64-bit installation only.
• When you start the CA ControlMinder services, the system generates the following messages. You can locate the messages at /var/log/messages.

  seos: module license 'Proprietary' taints kernel
  Disabling lock debugging due to kernel taint
  seos: module verification failed: signature and/or required key missing - tainting kernel
  

  Note: The system messages are normal and cause no problem.

• CA ControlMinder fails to detect users using Telnet, when you set the loginflags(PAMLogin) property for the LOGINAPPL record.
• The serevu utility fails to disable a user login using Telnet, when the failed login count exceeds the configured maximum value. However, the serevu utility behaves correctly for the SSH logins.
• When CA ControlMinder denies an incoming Telnet connection, the system Telnet service can transition to the failed state. When the Telnet service fails, restart the Telnet service.