General Installation Updates; Framework User Manager; Command Control; Compliance Auditor - Novell PRIVILEGED USER MANAGER 2.2.1 - GETTING STARTED GUIDE 03-31-2010 Getting Started Manual

1.3.1 General Installation Updates

Framework Manager installations now include the Syslog Emitter, which allows events to be
published to a syslog server that supports TCP. For more information, see
the Novell Privileged User Manager 2.2.1 Administration
Privileged User Manager can now be installed on Linux Mainframe zSeries 64-bit on SLES
®
(SUSE Linux Enterprise Server) versions 10 SP2 and 11 and Red Hat* version 5.
For upgrades from 2.2 to 2.2.1, please see
page 35.
A Sentinel collector is available for Privileged User Manager. To download the collector and
instructions, see Sentinel 6.1 Content (http://support.novell.com/products/sentinel/secure/
sentinel61.html).

1.3.2 Framework User Manager

Help Desk Role: You can select from a predefined set of attributes to create a help desk group
that can only manage user password problems such as forgotten passwords and locked accounts
because of too many bad login attempts. For more information, see
Group" in the Novell Privileged User Manager 2.2.1 Administration
LDAP Authentication: You can configure Framework Manager users so that they obtain their
authentication credentials from an LDAP server. For more information, see
Native Maps " in the

1.3.3 Command Control

Backup and Restore: You can create a backup of the Command Control database and restore
the backup at a future date. For more information, see
Novell Privileged User Manager 2.2.1 Administration
Keystroke Error Reporting: The Command Control agent now sends an appropriate message
rather than "session not terminated" when an error occurs with the keystroke file. The
following messages can now be sent to the audit manager for display:
File does not exist
Remote host does not exist
Run user does not exist
Executing binary does not exist
Run process missing
usrun -t Option: Provides a test command option that tests the specified command against the
rule structure. A yes or no is printed to the screen, indicating whether the command would be
accepted or not. For more information, see
Privileged User Manager 2.2.1 Administration guide

1.3.4 Compliance Auditor

Archive: You can archive records, store them offline, and restore them. For more information,
see "Archiving Records" in the
Export and Import: You can export and import audit rules, audit report settings, and access
control levels.
Chapter 5, "Upgrading from 2.2 to 2.2.1," on
Novell Privileged User Manager 2.2.1 Administration
"Using usrun with a
Novell Privileged User Manager 2.2.1 Administration
"Syslog
guide.
"Configuring a Help Desk
guide.
"Modify User:
guide.
"Backing Up and Restoring" in the
guide.
Command" in the
Novell Privileged User Manager Overview
Settings" in
Novell
guide.
11