Cannot rotate a Target User Password

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

In Privileged Access Management (PAM) a PAM admin cannot successfully rotate a password on a Linux server.

They get the following error:

PAM-CM-1341: Failed to establish a communications channel to the remote host

Cause

Target Unix Account was tied to the shell /usr/sbin/pbsh that didn't have the command "passwd" in it.

In the Tomcat Logs (in INFO Mode) were getting the following error:

received data 'passwd
/usr/sbin/pbsh: passwd: not found
# ' does NOT MATCH any of the pattern(s): '[(?si)(.*?password(\sfor|\sagain|)(\s\S*|):.*?)]'

Resolution

Updated the user's default Unix/Linux Shell in the /etc/passwd file to either SH or BASH.