Error When Editing Unix Attributes in Selang

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

When trying to edit a user's Unix attributes, selang produces the error "Failed to open file for external users".

AC> eu testuser unix shell(/bin/sh)

(localhost)

Successfully updated USER testuser

(localhost)

Unix :

======

ERROR: Failed to open file for external users

Environment

Privileged Identity Manager, all versions

Cause

This error is caused because the ladb files are missing. Checking the contents of /opt/CA/AccessControl/ladb would confirm this.

Resolution

To resolve the issue, use the command `sebuildla -a` to recreate the ladb files.

Additional Information

For more information about the sebuildla command, please see our Implementation Guide.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-identity-manager/12-8-01/reference/utilities/sebuildla-utility-create-a-lookaside-database.html