Jump to content

Linking / Syncing passwords for multiple objects


Recommended Posts

Hi guys,


I've searched through the manuals but couldn't find anything that covers my question. Funnily enough I do know that there's a report that checks whether what I want to do is happening.


Question: I know it's not a good idea and I know it's against good practices, but: is there a way to link or sync individual accounts across multiple hosts, so they share the exact same password?


Use case: Let's say I have Nx100 amount of IoT devices that have both a root account and a remote access account (let's call it "remote"). These boxen cannot hook up to a centralized accountsdatabase, like LDAP or AD, but we do want to manage both the passwords of root and of remote. Currently we are stuck following this process:


  1. Make a host object for the device (X).
  2. Define the remote user and password for host X in PState.
  3. Define a privileged user linked to the remote user for host X.
  4. Define the root user for host X and set its management through the privileged user for host X.


Repeat ad nauseam, for Nx100 systems. *shudder*


Things would be a bit easier if we could make one (1) privileged user which is linked to one of the remote user accounts, with the huge amount of remote user accounts linked in such a way that all of them share the same password.


Or perhaps: Now perhaps I'm thinking about this the entire wrong way. Is it possible to make one user record that applies to N amount of hosts?



Any tips would be useful!

Link to comment
Share on other sites

Hi Buckit,


Sorry, we do not have an easy method to achieve what you're wanting here. The only thing we can think of is to use our API to reset multiple accounts at once, using the same password. But like you mentioned, it's not generally recommended.


Click Studios

Link to comment
Share on other sites

Dang, was afraid of that.I also gave it a quick try to kludge this together as a dependency, but unfortunately that doesn't work ;)


Now, what I've seen in the past, working with CyberArk, is the possibility of defining one password+account object which references multiple hosts. I reckon that would be the most elegant solution. This would be a very useful feature to have, especially with IoT devices like the ones I'm working with.



Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...