Cannot Rotate Another User's Password on Linux in PAM 4.0.0 or 4.0.1

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM 4.0 is deployed and Linux account pamadmin is configured to manage root's password. The user has all the proper privileges on the OS, but the following error occurs.

PAM-CM-1349: A problem occurred while executing the script processor.  Please try your request again or contact your Administrator.

Environment

Privileged Access Manager 4.0.0 and 4.0.1

Cause

An issue with the regex for the default password entry prompt caused the script processor to error.

Resolution

This issue will be fixed as DE520357 in a future release.

As a workaround, open the target application, go to the Script Processor tab, and put (?si)(.*?password(\sfor|:).*?) in Password Entry Prompt.

Additional Information

The above regular expression may not work in all cases. The latest PAM releases use the following expression:

(?si)(.*?password(\sfor|\sagain|)(\s\S*|):.*?)