Symantec Privileged Access Management

 View Only

 Regarding the execution of the capam_command

MARUBUN SUPPORT's profile image
MARUBUN SUPPORT posted Jan 27, 2026 04:54 AM

Hi Team,

If a cluster is created using PAM and there is a member whose replication status is "synchronizing," I believe there is no problem with executing the capam_command on this cluster. Is this correct?

Thanks,

Ralf Prigl's profile image
Broadcom Employee Ralf Prigl

Hello, That would depend on what address you direct the command to. If you are using a PAM internal VIP, or you have an external load balancer that does regular health checks (invoking health.php) to see which cluster nodes are available, the command will be executed on an available node and there should be no problem.

MARUBUN SUPPORT's profile image
MARUBUN SUPPORT

The customer inquired about the load associated with command execution.
We believe the load from command execution depends on the customer's environment, PAM usage, and the commands being executed.
Unless it's an environment with low processing power or commands requiring extensive configuration, we don't expect a significant load.
Is that understanding correct?

Ralf Prigl's profile image
Broadcom Employee Ralf Prigl

Hello, It's impossible to comment on load of API activity w/o knowing any details about the type and the frequency of the activity. It would be possible to cause significant load on a PAM server by running expensive CLI commands, such as the listTargetAccounts command to retrieve all target accounts, in a loop on many workstations making calls into this PAM server in parallel with valid credentials. But that's just hypothetical.