Group list in Command Control metadata has rogue group node

  • 7009325
  • 09-Sep-2011
  • 26-Apr-2012

Environment

Novell Privileged User Manager 2.3.0

Situation

Group list in Command Control metadata has 'rouge' group node. 

Enabling $<Groups>$ in the Rule 'User Message' will display the rouge group node. 

This doesn't actually affect the running of Command Control, as the Command Control client will ignore the rouge group because it doesn't have a "name" attribute, but it could be possible to break custom scripts that manipulate the group node.

Resolution

Apply Privileged User Manager 2.3.0 HF3 (2.3.0-3) or greater.

Additional Information

Group list in Command Control metadata has rogue group node (in bold), for example:
 <Groups i.items="6">
  <group i.gid="-776099176"/>
  <group i.gid="1048" name="dbagroup"/>
  <group i.gid="1047" name="vmware"/>
  <group i.gid="1042" name="security"/>
  <group i.gid="100" name="users"/>
  <group i.gid="33" name="video"/>
  <group i.gid="16" name="dialout"/>
</Groups>