Connection modes

Connection modes specifies transport layer used in the password change process. The transport layer determines the list of available commands and default variables.


SSH

SSH connection mode uses SSH protocol to establish connection with remote host.


Commands

Command Description
INPUT Command executed on target host.
EXPECTED Expected result.
ENTER  
DELAY Delay between commands’ execution.

Variables

Variable Description
transport_bind_ip Fudo IP address used to establish connection with the remote host.
transport_host An IP address of the remote host that the password changer/verifier connects to.
transport_host_public_key Public key of the remote host.
transport_login An account on the target system authorized to change passwords.
transport_method Transport layer authentication method: password or sshkey.
transport_password_prompt

Regular expression describing the password prompt.

Note

In case this parameter is defined as constant but the user does not explicitly define the value after the password changer is assigned to the account, the default string will be used to determine the password prompt.

transport_port A port number that the password changer/verifier connects to.
transport_secret Secret used to authorize the account to execute password change.
account_login Login of the user whose password is being changed.
account_new_secret System default variable initiated with the value automatically generated by Fudo.

LDAP

LDAP transport layer runs an LDAP query to change the password property of an object defined in the directory service.


Commands

Command Description
DN Directory service DN (Distinguished Name) parameter.
FILTER Directory service user filter.

Note

Password changers based on the LDAP transport layer can have only one command defined.

Variables

Variable Description
transport_base Base distinguished name.
transport_bind_ip Fudo IP address used to establish connection with the remote host.
transport_ca_certificate CA certificate of the target system.
transport_domain Domain used to login to the target system.
transport_encoding Text encoding used by the target system.
transport_host An IP address of the remote host that the password changer/verifier connects to.
transport_login An account on the target system authorized to change passwords.
transport_port A port number that the password changer/verifier connects to.
transport_secret Secret used to authorize the account to execute password change.
transport_server_certificate Certificate of the target server.
account_domain Domain of the user whose password is being changed.
account_new_secret System default variable initiated with the value automatically generated by Fudo.

Telnet

Telnet connection mode uses Telnet protocol to establish connection with remote host and continue to communicate with the server in order to change the password.


Commands

Command Description
INPUT Command executed on target host.
EXPECTED Expected result.
ENTER  
DELAY Delay between commands’ execution.

Variables

Variable Description
transport_bind_ip Fudo IP address used to establish connection with the remote host.
transport_host An IP address of the remote host that the password changer/verifier connects to.
transport_login An account on the target system authorized to change passwords.
transport_port A port number that the password changer/verifier connects to.
transport_secret Secret used to authorize the account to execute password change.
account_login Login of the user whose password is being changed.
account_new_secret System default variable initiated with the value automatically generated by Fudo.

WinRM

WinRM transport layer uses Windows Remote Management protocol to interface with remote operating system and facilitate password change. WinRM is compatible with Certificate Revocation List (CRL) so that the used digital certificates are always up to date and valid.

Note

The default settings of WinRM Password Changer and Verifier allow changing and verifying passwords of local users only. If the domain users should be included too, add them to the “Allow log on locally” group so that the executing script takes domain users’ passwords while running, too.

Commands

Command Description
INPUT Command executed on target host.
EXPECTED Expected result.
ENTER  
DELAY Delay between commands’ execution.

Variables

Variable Description
transport_bind_ip Fudo IP address used to establish connection with the remote host.
transport_ca_certificate CA certificate of the target system.
transport_encoding Text encoding used by the target system.
transport_host An IP address of the remote host that the password changer/verifier connects to.
transport_login An account on the target system used to change passwords.
transport_port A port number that the password changer/verifier connects to.
transport_secret Secret used to access the account to execute password change.
account_login Login of the user whose password is being changed.
account_new_secret System default variable initiated with the value automatically generated by Fudo.

Related topics: