Symantec Privileged Access Management

  • 1.  CA Controlminder is creating duplicate ssh session for each one ?!

    Posted Apr 28, 2015 05:45 AM

    i found that CA PIM 12.8 endpoint create a duplicate session for each opened session on the endpoint server , why is that ? and how we can eliminate that because this consume the count of concurrent ssh session on the servers (AIX, solaris)

     

    thanks



  • 2.  Re: CA Controlminder is creating duplicate ssh session for each one ?!

    Broadcom Employee
    Posted Apr 29, 2015 12:38 PM

    Hi,

     

    Could you provide which OS kernel version(s) is/are affected by this issue?

    In addition, could you please provide a screenshot or command line output for us to get a better understanding?



  • 3.  Re: CA Controlminder is creating duplicate ssh session for each one ?!

    Posted Apr 30, 2015 05:57 AM

    HI

    after testing , this behavior resulting from KBL function on unix platform , when kbl is enabled , it create a duplicate session from the ssh session for every user , even if this user is not marked interactive in it's auditing checks , if the kbl is disabled (in the seos.ini) and the kbl process is down , this behavior will disappear.

    i am checking with the support not to see if there are possibility to make the kbl working without creating additional session or it is by default .

     

    thanks for your replying

     

    wael