Can two different Linux A2A Agents be on the same server reporting to different PAM Appliances?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Privileged Access Manager (PAM) Admin has a business requirement to have 2 different Linux A2A installs reporting into different PAM Appliances.

They want to know if this environment is supported and can work?

Resolution

Yes you can, however you will not be able to use our rpm installer for both installs.  On one Yes, then for the other you would need to:

• Use our setup_unix installer with the <InstallDir> option and install to different directories
• Then on one of the installs, you have to reconfigure/change our local ports, cspmserver values and c_logfile location in the cspm_client_config.xml to unique values:
  <daemonserver1_port>28088</daemonserver1_port>
  <daemonserver2_port>28888</daemonserver2_port>
   <cspmserver></cspmserver> 

<c_logfile>/tmp/cspm_c_client_log.txt</c_logfile>   
before starting them.

• Finally when starting our A2A Agent, you need to script out and set the $CSPM_CLIENT_HOME before starting each one, so they start properly (example):

export CSPM_CLIENT_HOME=</path/to/a2ainstall>

$CSPM_CLIENT_HOME/cspmclient/bin/cspmclientd start

Additional Information

Note:  If you don't set the c_logfile to a unique value, both A2A Agents will startup properly, but you will get the following error when trying to retrieve a password:

408 null null failed to set log file /tmp/cspm_c_client_log.txt permission