Setting up Secret Changing on a Unix System

This topic contains an example of setting up secret changing on a Unix system.

Adding a secret change policy

1. Select Management > Secret Changers.

2. Go to Secret Change Policies tab.

3. Click Add Secret Change Policy to create a new secret changing policy.

4. Provide secret change policy name.

Note

Provide a descriptive name so that anyone administrating Fudo Enterprise can tell what the policy does at a glance. E.g. 10 minutes, 20 characters, special characters, uppercase.

5. Select Secret change and define how frequently the password will be changed.

6. Provide the number of characters comprising the password.

7. Select desired password complexity options and provide the minimal number of characters for each.

8. Select the Secret verification and define how frequently the Secret Manager should verify whether the password has not been changed in any other way but the Secret Manager itself.

9. Click Save to store secret changer policy.

Assigning a secret changer and a verifier to the privileged account

1. Select Management > Accounts.

2. Find the name of the desired account and click it to edit the account.

3. Go to SECRET CHANGERS tab.

Note

Regular account type, password method and login are required to configure secret changers.

4. In the Secret Changers field select Unix/SSH changer script from the Add changer drop-down list.

5. In the Secret Changers window, in the Timeout field, define the script’s execution time limit.

6. Review and modify the default values for the variables according to the table below.

Variable	Value
account_login	cont_int_mr_jenkins: mr_jenkins
transport_bind_ip	cont_int: Any
transport_host	cont_int: 10.0.0.12
transport_host_public_key	cont_int: ssh-rsa AAA[...]
transport_login	Enter manually: root
transport_method	Enter manually: password
transport_password_prompt	constant
transport_port	cont_int: 22
transport_secret	cont_int_mr_jenkins: *****

7. Click Save to close Secret Changers window.

Note

• Variables starting with transport_ are the transport layer variables determining connection parameters with the target host.

• Secret changer variables can be assigned values manually or initialized with properties of other objects.

8. In the Secret verifiers field select Unix/SSH verifier script from the Add verifier drop-down list.

9. In the Secret verifiers window, in the Timeout field, define the script’s execution time limit.

10. Review and modify the default values for the variables according to the table below.

Variable	Value
transport_bind_ip	cont_int: Any
transport_host	cont_int: 10.0.0.12
transport_host_public_key	cont_int: ssh-rsa AAA[...]
transport_login	cont_int_mr_jenkins: mr_jenkins
transport_method	cont_int_mr_jenkins: password
transport_password_prompt	constant
transport_port	cont_int: 22
transport_secret	cont_int_mr_jenkins: *****

11. Click Save to close Secret verifiers window.

12. Next, click Save in the upper right corner to save the changes to the account definition.

Related topics:

• Connection Modes

• Custom Secret Changers