ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How to clean up incorrect subscriptions to PMDB

book

Article ID: 132385

calendar_today

Updated On:

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM)

Issue/Introduction



Someone has subscribed endpoints with special characters in the names to a PMDB.  It seems it is not possible to remove them by means of the regular sepmd command. For instance:

sepmd -u test_pmdb "mymachine.ca.com |||"

Failed removing mymachine.ca.com▒▒▒ ||| from Policy Model test_pmdb: Subscriber does not exist. 

How can I remove the incorrectly subscribed machines in this case ?

 

Environment

CA AC 12.X, CA PIM 12.X and CA PAM SC 14.X

Resolution

There is no manual way of selectively deleting the different subscribers while leaving the other in place. The best option in this particular case is to completely wipe out the existing subscribers, truncate the updates.dat file and then recreate the subscriptions for the correct endpoint names. 

To carry out these actions please follow this procedure
  1. Truncate the updates.dat: 
                sepmd -t test_pmdb auto
  1. Stop the PMDB (secons -s will stop it in Windows and UNIX/Linux)
  2. Delete the subscribers.dat, subscribers.000 and subscribers.001 files
  3. Restart the PMDB (seload in UNIX/Linux or seosd -start in Windows)
  4. Resubscribe the correct endpoints and children databases
                sepms -s test_pmdb mymachine.ca.com

Do this for all the correct endpoints and children databases which should be subscribed to the PMDB in consideration
Powered by Wolken Software