Setting Up a Service Connection for Resources
For resources based on Windows OS, *nix OS and MS SQL Server, MySQL, OracleDB and PostgreSQL, you can configure a service connection that will allow you to perform the following operations:
- Checking the connection to the resource
- Synchronization of accounts
- Account password verification
- Resetting account passwords
- Synchronization of account security groups
- Synchronization of data about the OS or DBMS version
The service connection can be configured both when adding a resource or after adding it to Axidian Privilege, this article will consider examples of setting up a service connection for resources already added to the system.
Checking passwords of local resource accounts under Linux OS can be performed without setting up a service connection to the resource.
Adding Accounts
Service operations are performed on behalf of a service account. Both a local resource account and a domain account can be assigned to the service role. Before setting up a service connection, you must add a local or domain account to the system.
Selecting and Setting Up a Service Connection
- Open the resource profile and click
to the right of the Service connection option
- Enable the Use connector for service connection option
Setting Up a Service Connection for Windows
- Select Connector - Windows
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
Selecting a Service Account
- Enter the Name of the local or domain account in whole or in part
- Select an account
- Complete the service connection setup
Setting Up a Service Connection for *nix
- Select Connector - SSH
- Select the connection template
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
- Enter the port number if it is not the default. The Template field contains templates of service operations for OS *nix. By default, templates of service operations for OS * nix are absent in Axidian Privilege. To create and add a template, please contact Technical Support.
Selecting a Service Account
- Enter the Name of the local account in whole or in part
- Select an account
- Complete the service connection setup
Setting Up a Service Connection for MS SQL Server DBMS
- Select Microsoft SQL Server Connector
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
Selecting a Service Account
- Enter the Name of the domain account or DBMS account.
- Select an account.
- Complete the service connection setup. If an instance of MS SQL Server is part of an Active Directory domain, then both domain and DBMS accounts can be used as a service one. If an instance of MS SQL Server is not part of an Active Directory domain, then only DBMS accounts can be used as a service one.
Setting Up a Service Connection for OracleDB
- Select Oracle Database Connector
- Check the Use another connection address option and enter Connection address, port and SID of the DBMS or DB instance
Selecting a Service Account
- Enter the Name of the DBMS account in whole or in part
- Select an account
- Complete the service connection setup
Setting Up a Service Connection for PostgreSQL / PostgreSQL Pro
- Select PostgreSQL Connector
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
- Enter the port number if it is not the default.
Selecting a Service Account
- Enter the Name of the DBMS account in whole or in part
- Select an account
- Complete the service connection setup
Setting Up a Service Connection for MySQL
- Select PostgreSQL Connector
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
- Enter the port number if it is not the default.
Selecting a Service Account
- Enter the Name of the DBMS account in whole or in part.
- Select an account.
- Complete the service connection setup.
To perform service operations Axidian Privilege uses the mysql_native_password authentication type, other authentication types are not supported.
Setting Up a MySQL Service Account
- Open the MySQL service account profile and click
to the right of the Name option.
- Fill in the Enter new host for account field.
Setting Up a Service Connection for Cisco IOS
- Select Cisco IOS Connector.
- If you need to set password for privileged EXEC mode, put the appropriate checkbox and specify it.
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
- Enter the Port if it is not the default.
Selecting a Service Account
- Enter the name of the local Account name fully or partially.
- Select an account.
- Complete the service connection.
Setting Up a Service Connection for Inspur BMC
- Select Inspur BMC Connector.
- If the connection address is different from the DNS name/IP address, specify it by selecting the appropriate checkbox.
- Enter the Port if it is not the default.
Selecting a Service Account
- Enter the name of the local Account name fully or partially.
- Select an account.
- Complete the service connection.