Lluis_Domenech

Latest Knowledge Base Articles published for CA Privileged Access Manager (18-Apr-2017)

Discussion created by Lluis_Domenech Employee on Apr 18, 2017
Latest reply on Apr 18, 2017 by Chris_Hackett

Hello,

 

Here I'm posting the latest Knowledge Base Articles for CA Privileged Access Manager published or updated since 30-Mar-2017.

 

Showing Results 1-25 of 126

Session: ‘xsuite-default-sp’ not valid because it is expired
CA PAM logged the error "Session: ‘xsuite-default-sp’ not valid because it is expired" corresponding to the failed login to CA PAM via 'Single Sign-On' option
Last Update: 2017-04-13    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1084165

 

AuthnRequest with AuthnContexts is not supported
Error "AuthnRequest with AuthnContexts is not supported" is returned when users attempt to Single Sign-On to CA PAM
Last Update: 2017-04-13    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1876444

 

Failed to decrypt XML element
Error "Failed to decrypt XML element" is returned when users attempt to Single Sign-On to CA PAM
Last Update: 2017-04-13    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1240497

 

Dubious Radius User password prompt label
Password View Policy requires user to re-authenticate to view Target Account's password. If the requesting user is with Radius authentication, the password prompt label reads "???login.label.radiusPassword???"
Last Update: 2017-04-12    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1373497

 

State information lost
Error "State information lost" is returned when user attempt to Single Sign-On to CA PAM
Last Update: 2017-04-12    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1451989

 

Failed to initiate CA PAM Client session
When another user remote access to the Terminal Server and attempt to initiate CA PAM Client session from the same file directory, in parallel to another user, some files are being locked and new session goes back to the first user
Last Update: 2017-04-12    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1182467

 

Customer can't get CA PAM client to start Mac Assistant
We have a customer that is trying to login to our Xceedium device using the CA PAM client from a Mac. She gets almost all the way logged in, but then runs into error "Unable to Start Mac Assistant software. Reason: permission denied to bind interface."
Last Update: 2017-04-11    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1796716

 

UNIX admin account fails to update password of other account
when rotating the root using Admin account, customer sees the new password being sent as the current password for "su" and then second try with "sudo"
Last Update: 2017-04-11    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1339701

 

PAM 2.8 Proxy agent service name misnamed
Confirming an issue with the service name of the Windows Proxy Agent installed in Windows systems. Obviously it has a service name of "%SERVICE_NAME$".
Last Update: 2017-04-11    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1712388

 

I am trying to search devices with just one or two characters, but it only shows those devices whose name starts with those characters. Why is this so ?
Trying to search device in the pam by entering 1 or 2 character only those whose name starts like that are shown. It doesn't displays result where the character is matching in the middle or end of the device.
Last Update: 2017-04-11    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1842954

 

PAM from 2.4 to 2.6.2 it is not possible to access any of the devices defined with VNC access method
Cannot access to VNC access method after upgrading
Last Update: 2017-04-11    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1115535

 

First step after deploying a new Privileged Access Manager instance
After implementing the ova what is the default user to login?
Last Update: 2017-04-11    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1338599

 

Associate more than one secondary Target Accounts with the RDP Application for Transparent Login
We can associate multiple Target Accounts as primary access credentials that are consumed during login to the Device. However, it is not possible to associate more than one secondary credentials that are consumed by the RDP Application.
Last Update: 2017-04-10    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1988414

 

"Message 0: Error occurred while trying to complete request. (12)" is returned as user attempts to access Target Servers via CA PAM
After CA PAM is upgraded to 2.6 release, users are prompted with following error as they attempt to access Target Servers via CA PAM: Message 0: Error occurred while trying to complete request. (12)
Last Update: 2017-04-07    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1709213

 

Socket Filter Agent 2.7 on AIX 6.1 and AIX 7.1 are not blocking SSH access to the blacklisted hosts
SFA should terminate user leapfrog attempts based on the socket filter blacklist associated to the policy.
Last Update: 2017-04-07    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1965564

 

Use RDP Application Transparent Login for Java Tool.
I am having issues trying to configure the Transparent Login in a Java tool. If I disable the TL, the tool is published.
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1882297

 

Why are emails not being sent from CA PAM?
This document describes how CA PAM handles emails, why they may not be sent & where to look when something goes wrong.
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1612243

 

Automatic Password Rotation fail
The area of interest are Unix servers where the root password is managed. From the 20 servers now being managed by pam - 2 fail verification. The failure is random. Although the password rotation failed the access to these two machines is still possible
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1697622

 

PAM cluster port status check using port scan tool in PAM.
PAM cluster port scan and status check
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1677237

 

Post Upgrade to 2.8.1 Transparent login stop working.
in our environment and our transparent login was workign fine, post upgrade it has stopped working. Seems the script is executing properly It is able to put IP address and username but it is unable to put the Password in the Password text box,
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1943173

 

Next Token Mode when using RSA with CA PAM
This article explains what causes an RSA Token to go into Next Token Mode, and how PAM interacts with the server when in this mode.
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1569493

 

How to deploy CA PAM in AWS
Deploying CA PAM in AWS is a simple process, but it does require a number of steps.
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1536876

 

Session Recording Error on View Attempt
After configuring session recording we get an error stating Message 16018: Unable to locate recording data. The file may have been removed, or the mount may be down.
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1302402

 

Patches for CA LDAP
Customer is trying to integrate CA PAM with RACF for password management, which requires CA LDAP. The CA LDAP product itself is available for download from the CA PAM product downloads page, but patches are not found there.
Last Update: 2017-04-06    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1905739

 

Using the Simple Network Management Protocol (SNMP) with CA PAM
Simple Network Management Protocol is an internet standard protocol used to manage network devices. This document explains how to use it with CA PAM.

Last Update: 2017-03-30    Size: 83 kb    Type: Knowledge Base Articles    ID: TEC1599725
 

Note that you can always access the full list going to this link:

http://www.ca.com/us/services-support/ca-support/ca-support-online/support-by-product/ca-privileged-access-management.html?d=t&type=Knowledge&sortby=daten&page=1&typeofcontent=Knowledge%20Base%20Articles
 

I hope it helps.

 

Best Regards,

Lluis Domenech

Support Delivery Manager

Outcomes