Symantec Privileged Access Management

  • 1.  Add host to host group via command line

    Posted Oct 07, 2015 10:55 AM

    Hi,

     

    Is there is a way to add a host(endpoint) to host group on control minder using command line instead of using CA ENTM?

     

    I'm trying to do automatic policy assignment whenever a host is added to host group.

     

    Thanks !



  • 2.  Re: Add host to host group via command line

    Posted Oct 07, 2015 12:07 PM

    Hello Karthik,

     

    How Automatic Host Group Assignment Works: https://support.ca.com/cadocs/0/CA%20ControlMinder%2012%208-ENU/Bookshelf_Files/HTML/idocs/1523837.html

     

    There are commands listed in the doc on how to create new host groups and setup criteria so hosts are automatically added to the group.

     

    Now, the simple command to add existing hosts to existing host group 'All Windows hosts'.

     

    editres GHNODE ("All Windows hosts") mem+(serverabc.domian.com) noexit

     

    Please note this needs to be done in the DMS__ database.

     

    Thanks,

    Eric



  • 3.  Re: Add host to host group via command line

    Posted Oct 07, 2015 06:26 PM

    Thanks Eric, we will try this in our test environment.

     

    Is it is possible to add host based on host name instead of IP address?

    I'm planning to run direct selang commands using selang -c " commands_to_execute" on DMS.

     

    Thanks,

    Karthik    



  • 4.  Re: Add host to host group via command line
    Best Answer

    Posted Oct 08, 2015 11:04 AM

    You may be able to use the 'mem' attribute instead.