KB-8446: Cloud Linux Agent cunenroll -d will delete all credentials from resource

Tips for finding Knowledge Articles

- Enter just a few key words related to your question or problem
- Add Key words to refine your search as necessary
- Do not use punctuation
- Search is not case sensitive
- Avoid non-descriptive filler words like "how", "the", "what", etc.
- If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
- Minimum supported Internet Explorer version is IE9

Home >

KB-8446: Cloud Linux Agent cunenroll -d will delete all credentials from resource

Product:

Centrify Privilege Service ,

Published:

30 March,17 at 06:39 PM

Rating:

Applies to: Cloud Linux Agent 16.11 and greater on all supported platforms.

Problem:
Successfully able to run cunenroll command with the -d (--delete) option when there are resource accounts present. This should not be possible as the Linux machine's account does not have delete permissions for the resource's accounts.

Cause:
The -d option allows the enrolled machine to delete everything during unenrollment.

Resolution:
This will be fixed in a later release.

Note: All of the managed credentials added to the resource get removed during this process.