Custom password changers

Custom password changers enable defining a set of commands executed on a remote host in case the built-in password changers cannot handle a specific use case scenario.

Note

In cluster configuration, the node responsible for changing passwords on monitored systems is configured in system settings. For more information refer to Password changers - active cluster node topic.

Defining a custom password changer


  1. Select Management > Password changers.
  2. Select Custom changers tab.
  3. Click Add.

Note

Alternatively, you can find and click an existing password changer and click Copy to create a new password changer based on currently opened definition.

../../_images/pc_copy.png
  1. Define the password changer’s name.
  2. From the Script type drop-down list, select if the script is a password changer or password verifier.
  3. From the Connection mode drop-down list, select the transport layer.
  4. In the Timeout field, define the script’s execution time limit.
../../_images/pc_general.png
  1. In the Commands list section, click . to add a command.
../../_images/pc_script.png

Note

Available commands depend on selected transport layer. For more information on connection modes, refer to the Connection modes topic.

  • INPUT - command executed on target host.
  • EXPECTED - expected result.
  • ENTER
  • DELAY - delay between commands’ execution.
  • DN - directory service DN (Distinguished Name) parameter.
  • FILTER - directory service user filter.
  1. Enter the command or define action’s parameters.

Note

You can use pre-defined transport layer or user defined variables in commands. To use or define a variable, enclose it in %% characters (e.g. %%transport_host%%, %%custom_variable%%).

../../_images/variables.gif
  1. Click i to add optional comment.
../../_images/pc_comment.png
  1. Repeat steps 8-10 to add more commands.
  2. In the Variables section, define variables’ attributes.
../../_images/pc_variables.png

Note

Variables can be initiated with values referenced from other objects or they can be assigned a constant value.

  1. Click Save.
  2. Define password change policy and assign the password changer to account.

Note

Example

In this password changer example, the password change is triggered with the passwd command executed with sudo privileges on a host running FreeBSD operating system.

Commands list

  Action Content Comment
1 EXPECTED Password Expected terminal output.
2 INPUT %%transport_secret%% Privileged account password.
3 EXPECTED \[newtd_pc@john-laptop.*\] Expected terminal output.
4 INPUT sudo passwd %%account_login%% Change password to specified account.
5 EXPECTED Password Expected terminal output.
6 INPUT %%transport_secret%%  
7 EXPECTED Changing local password Expected terminal output.
8 EXPECTED New Password Expected terminal output.
9 INPUT %%account_new_secret%%  
10 EXPECTED Retype New Password Expected terminal output.
11 INPUT %%account_new_secret%%  
12 INPUT echo $?  
13 EXPECTED 0  

Variables

Variable name Object type Object property Encrypt
transport_method constant   fail
transport_bind_to server_property bind_ip fail
transport_user account login fail
transport_host srever_address_property host fail
transport_port server_property port fail
transport_secret account secret ok
tranposrt_host_public_key constant   fail
account_login account login fail

Editing a custom password changer

Warning

Modifying a password changer that is already in use might require a manual change in every account it is assigned to.


  1. Select Management > Password changers.
  2. Select Custom changers tab.
  3. Click the name of desired password changer.
  4. Edit selected commands.
  5. Click i to remove selected command.
  6. Click Save.

Deleting a custom password changer


  1. Select Management > Password changers.
  2. Select Custom changers tab.
  3. Select desired elements and click Delete.
  4. Confirm deleting selected objects.

Related topics: