PIM/PAMSC : Terminal is blank for outbound network log
search cancel

PIM/PAMSC : Terminal is blank for outbound network log

book

Article ID: 145267

calendar_today

Updated On:

Products

CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

The source terminal doesn't appear in TCP outbound audit log.
---
10 Oct 2019 00:52:31 P LOGIN root 59 2 <SOURCE HOST> SSH
10 Oct 2019 00:52:47 P TCP ssh root 408 3 <REMOTE HOST> /usr/bin/ssh
---
The <SOURCE HOST> should appear at the last of the TCP log.

Environment

CA PIM - Unix:  12.8 SP1 CP2
CA PAMSC - Unix: 14.1 CP2

Cause

Product Defect

Resolution

Fix is included in PIM 12.8 SP1 CP5.
And also it is included in PAMSC 14.1 CP3.
Please apply latest patch level.

Additional Information

The workaround is to check sessionID for TCP log and find login log with same sessionID and see the source host.
Please be aware that sessionID will be changed after restarting PIM/PAMSC.