Setting up password changing on a Unix system

This topic contains an example of setting up password changing on a Unix system.

Adding a password change policy

1. Select Management > Password changers.
2. Click Add to create a new password changing policy.

3. Provide password change policy name.

Note

Provide a descriptive name so that anyone administrating Fudo PAM can tell what the policy does at a glance. E.g. 10 minutes, 20 characters, special characters, uppercase.

4. Select Password change enabled and define how frequently the password will be changed.
5. Select the Password verification enabled and define how frequently the Secret Manager should verify whether the password has not been changed in any outher way but the Secret Manager itself.

6. Provide the number of characters comprising the password.
7. Select desired password complexity options and provide the minimal number of characters for each.

8. Click Save to store password changer policy.

Assigning password changer to the privileged account

1. Select Management > Accounts.
2. Find and click desired account object.

3. Provide the privileged account login in the Credentials section.
4. Select with password from the Replace secret drop-down list.
5. Provide privileged account password.
6. Select your policy from the Password change policy drop-down list.

7. In the Password changer section, select the Unix Account over SSH from the Password changer drop-down list.
8. Provide superuser login credentials.

Note

Superuser account enables resetting the password in case the Secret manager detects that it has been changed by someone else.

9. Click Save.

Related topics:

• Requirements
• Data model