I am trying to download and to install the Socket Filter Agent (SFA) in UBUNTU, but I don't find this distribution in the installation package. How should I proceed ?

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

The Product Compatibility Matrix for CA PAM lists Linux as a supported OS for the Socket Filter Agent (SFA)

https://support.ca.com/phpdocs/7/9526/9526-PAM-platformsupportmatrix.pdf

However, Linux has many variants and not all are present explicitly in the installation package files

We need the SFA for Ubuntu, but from the downloadable files, the only distributions available seem to be Aix, Redhat, Suse, Debian and Solaris. Is it possible to install it in Ubuntu ? If so, how ?

Environment

CA PAM all versions

Resolution

While Ubuntu is not listed, it is- in fact- a variant of Debian. As such, you may use the SFA script for the Debian version equivalent to your Ubuntu one and that should work fine. To see the correspondence between Ubuntu and Debian, please consult

https://askubuntu.com/questions/445487/what-debian-version-are-the-different-ubuntu-versions-based-on

On the other hand, care has to be taken that  firewalls are not blocking traffic to and from ports 8550 and 443 of the device and the appliance. Please see the port listing and specifications for each PAM component in:

https://docops.ca.com/ca-privileged-access-manager/3-2/EN/deploying/ip-addresses-and-ports-for-network-connectivity

Typical symptoms of loss of connectivity may be the gkfsd process starting and stopping and the SFA not being listed in the CA PAM console. If you suspect a problem with port blocking at the Ubuntu device, you may check the apparmor (Ubuntu security module) guide 

https://help.ubuntu.com/lts/serverguide/apparmor.html.en

for troubleshooting.