Automatic password change

Need new test, action, option? Post request here.
Post Reply
User avatar
Marcus
Posts: 367
Joined: Mon Nov 18, 2002 6:00 pm

Post by Marcus »

Is it possible to build a function in HostMonitor to change the password used for a test automaticly?

Once set up, you never have to change the passwords again, since HostMonitor wil do that for you.

See also: http://www.ks-soft.net/cgi-bin/phpBB/vi ... 50&forum=4

<font size=-1>[ This Message was edited by: Marcus on 2003-07-27 04:54 ]</font>
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Interesting idea. You are using some account just for monitoring purpose and want to change password ar regular basis for this account?
I have added this task into "to do" list but don't think it will be implemented soon.

Regards
Alex
User avatar
Marcus
Posts: 367
Joined: Mon Nov 18, 2002 6:00 pm

Post by Marcus »

>You are using some account just for monitoring purpose and want to change password ar regular basis for this account? Yes :smile:
smckenna
Posts: 19
Joined: Sat Jul 26, 2003 6:00 pm

Post by smckenna »

I too set it up with its own account.

Are you thinking of HM changing the password at the:

HM (internal) test connect as
HM (as a service, startup settings)
RMA (service startup settings)
Domain/Local Account

Or all /smirk

Cool Idea.

Edit: I should clearify, I have each RMA set up with a domain account in its respective corporate domain. Multiple companies.


<font size=-1>[ This Message was edited by: smckenna on 2003-08-04 14:18 ]</font>
User avatar
Marcus
Posts: 367
Joined: Mon Nov 18, 2002 6:00 pm

Post by Marcus »

>HM (internal) test connect as
This doesn't sound as a real problem. HM is in control and can change the password. Off course the current policies must allow a password change.

>HM (as a service, startup settings)
This I don't see HM do itself, since it can't stop and start itself. So a helper program could be the solution.

>RMA (service startup settings)
Again HM can be in control and change the password and restart the agent.

>Domain/Local Account
Both.

And yes, I love to see them all implemented :smile:

>I have each RMA set up with a domain account in its respective corporate domain
This means that the current HM account must be able to change the password. In my case that's no problem.

<font size=-1>[ This Message was edited by: Marcus on 2003-08-05 03:23 ]</font>
zacherynuk
Posts: 26
Joined: Thu Jul 20, 2006 10:24 am

Did Anything ever get done about this ?

Post by zacherynuk »

Not knowing the remote agent password would be ideal, alowing the RMA to scramble it's password scramble itself on a schedule would be perfect.

In the mean-time, is there a way of changing passwords on remote systems from the KS-Hostmon server?

Running 8.32, multiple different customers, RMA's and sites.

Thanks,

z
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

In the mean-time, is there a way of changing passwords on remote systems from the KS-Hostmon server?
Use RMA Manager (menu Agents -> Agent configuration)
http://www.ks-soft.net/hostmon.eng/rma- ... #how_setup

Regards
Alex
zacherynuk
Posts: 26
Joined: Thu Jul 20, 2006 10:24 am

Does it change ? - unclear

Post by zacherynuk »

Hi,

So changing the password in this screen changes the remote agent service account password and restarts the agent service ?

The text doesn't state this, I was under the impression that this password simply had to match the initial password set when creating the RMA.

Thanks for the prompt reply!
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

agent service account password? What is that?

RMA Manager changes password that is used for encryption between HostMonitor and RMA, RMA Manager and RMA.

Regards
Alex
zacherynuk
Posts: 26
Joined: Thu Jul 20, 2006 10:24 am

Post by zacherynuk »

I'm talking about the account under which the active RMA runs; the Service Account, which in our case is a domain admin / local admin account at the very least.

The RMA's have the power to change their own credentials on the system and restart their own service, this I feel would be a very useful in-built functionality.

The service account password under which the RMA runs, need not be known by anybody, so if it could be self-generating and self-applied at a given schedule, the risk of it becoming known and abused in all but illuminated.

A dedicated action-taskbar so that all the powerful things which can be setup as actions to tests, can be invoked by the hostmonitor operator when they see fit (eg: changing credentials of other accounts, rebooting a system following successful updates, clearing logs etc) would also be ace.

Currently, the only way I have found to utilise this power, is to have ‘fake’ tests setup, with no schedule, which you manually run now and then, knowing that the action would be performed, eg:

Net user _hostmonserviceaccount NewPassword
sc config RMAService password="NewPassword"
net stop RMAService && net start RMAService

Cheers,

z
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Thank you for explanation.
I have added this task into "to do" list. Low priority.

Regards
Alex
Post Reply