Account cannot be deleted. Account used for active directory configuration.
Account cannot be deleted. Account used for active directory configuration. So what change needs to be done to get rid of the account?
least privilege
All, I've been using a managed service account for the service account that PMP uses for it's local service, with much success I must say. However the way to get it working is to make the msa a member of the local administrators security group. As we try to leverage the concept of "least privilege" as much as possible I would like to know if there's documentation on the user rights etc that are needed to operate PMP on the local box. Thanks in advance for any reply.
AD Import Auto Creation of Resource Groups
All, My company is currently evaluating PMP MSP and we’re trying to understand the concepts behind the tool. One of them is the AD import function and the reason why PMP automatically creates resource groups based on the OU's that it finds. (The latter is an assumption). I expect that this is for management purposes, however we would like to create our own resource groups without the overhead of additional groups being created every time we do a AD import. Can anyone explain the reasoning behind
BMC management interface password reset via IPMI
Can PMP reset BMC management interface passwords via ipmi? I can see "HP iLO" in the resource dropdown menu, but there is no general "BMC" resource available. How would I then reset the BMC management interface password for example on an IBM/Lenovo server?
One Resourcename with two accounts
Hi, i have one Resource with Name "Test" and two Accounts. One Account should have full Access to the user Group "Admin" and one Account should have view Access to the user Group "User'. How can i resolve this Problem, because i can only save the Resource Name unique. Best Regards Doris
Change password policy via API
Hi, We are interested on change 'Password Policy' of an account or a resource using REST API. Is this operation possible? If so, What's the endpoint and 'Input Data' to use? Thanks by your attention.
Too many open files since Upgrade to 9.8
Hi, we currently experience an Issue regarding "Too many open Files". This will cause the High-Availability to fail. lsof Output shows: java 31153 root 1095r REG 253,1 103 2625098 /opt/ManageEngine/PMP/pgsql/bin/Primary.conf java 31153 root 1097r REG 253,1 103 2625098 /opt/ManageEngine/PMP/pgsql/bin/Primary.conf java 31153 root 1099r REG 253,1 103 2625098 /opt/ManageEngine/PMP/pgsql/bin/Primary.conf java 31153 root 1103r REG 253,1 103 2625098 /opt/ManageEngine/PMP/pgsql/bin/Primary.conf java 31153
recovery after failed master (version 9700)
I'm trying to locate the Disaster recovery document that is specific to PMP w/ postgresql. So far, I've only been able to find the ones that deal with MSSql and MySql. Can someone provide me the URL to the document the covers restoring an HA master server running pgsql? thanks. theodore
Desktop client application ?
Hello, Do you plan to develop a PMP desktop client application ?
built-in captcha
Can you confirm that the built-in captcha is wholy self-contained and doesn't require internet access.
Access PMP with Azure Multi-Factor Authentication?
Hi, Just curious to know if any of you are using Azure Multi-Factor Authentication with PMP for second factor when logging in to the console? Thinking about investing some time in to looking in to it, but thought I'd see if any one was using it here first. If you are using it, what was it like to configure? Any gotchas? Chris
Installing new SSL Certificate
I am attempting to create and install a new SSL Certificate on our server using the "Using OpenSSL' instructions located here: https://www.manageengine.com/products/passwordmanagerpro/faq.html#ssl but I am getting an error message at step 4. I am running the following command openssl pkcs12 -export -in PMP20181114.cer -inkey pmphanover.key -out pmp20181114.p12 -name pmp -CAfile rootnew.cer -caname pmp -chain The system is generating the keystore file, but I am receiving the following error message
Problem setting up High Availability
I am in the process of setting up High Availability and was able to get to the last step - starting up the secondary server. Unfortunately, the secondary server (default postgres db, linux:ubuntu) fails to start up. Looking at wrapper.log for the secondary server I see the error: Username cannot be postgres. Hint: DB connecting user cannot be a super user. Provide a normal user credential. The postgres database for the primary server uses the username 'postgres' and that user is a superuser. I'm
Autofill doen't work (Firefox only) when user have personnal password
Hello, PMP version 9800 We found a bug with Firefox extension (1.1.0.6) on Firefox versions 60.3.0esr and latest version. If a user have personnal passwords then autofill doesn't work. To reproduce this bug: Create a new user (LDAP or local) with password admin role. Connect on this user account, create a new ressource (with URL) and create a personnal ressource too. Go to URL you specify on ressource (not presonnal) -> Autofill doesn't work Even if you delete all your personnal passwords autofill
[Free Webinar] Manage your client organizations efficiently with Password Manager Pro MSP
Hi All, Our next and final session in the Password Manager Pro Masterclass series is titled "Password Manager Pro MSP: Managing organizations," scheduled for November 15th. Click here to register for the session. This session will show how you, as a service provider, can efficiently manage your client organizations in Password Manager Pro and take care of their critical IT resources. Managing client organizations, establishing replication settings, and enabling client collaboration. Password Manager
PMP DB Backup Reports
Hello is there a report template or a way to Report on PMP postgres DB backups? We would like reports that say the database backup was successful.
Turn CAPTCHA off
Hello, How do we disable the CAPTCHA mechanism that is triggered when someone has too many failed logons? We are using Active Directory authentication; after two failed logons to PMP their account is getting locked anyway (since PMP authenticates twice every time anyway.) The CAPTCHA isn't necessary or appropriate for a user base of our size, and there's nothing in our Information Security Policy that mandates this. Thank you, - Steve
[Free webinar] Ensure high availability and handle disasters better with Password Manager Pro
Hi All, Our next topic for the Password Manager Pro Masterclass series is "Ensuring service availability and handling disasters," scheduled for November 01st. Click here to register for the session. This session will show you how to better handle disastrous circumstances and ensure service continuity with the help of redundant servers, failover clusters, and quick data recovery procedures. Here's a quick look at the agenda for the ninth Masterclass session: 1. Data redundancy and recovery Establishing
unable to login to PMP
Hello, I am a PMP user and have a strange problem in working with PMP. Sometimes while users are connecting to remote servers, their connection is suddenly closed and then those users cannot even login to PMP web console, unless reseting their passwords.
password manager pro
Hello, after upgrading password manager pro to version 9.8.0, bulk operation for configure remote password reset did not running. it works only one resurces at time time. i need to configure ~200 resources. regards
Compatibility with VMware SRM
Does ManageEngine support replication of a PMP server via VMware Site Recovery Manager? Thanks, - Steve
High Availability FAILURE
Hi, We are currently in the middle of a network swing test, where our primary datacenter has been isolated from the network, and all services have been migrated to the backup datacenter. High Availability in PMP, which has worked in the past, has failed. The Admin/High Availability screen says "High Availability status: Not Running," and "You are currently accessing secondary server." Because of this, none of our technicians can request access to passwords, which is something we need during tests
Mass Periodic Password Reset and Access Control
Hi, How do you proceed when you have let's say 100 servers, with Access Control (with auto-approval) on their accounts passwords and you need to perform a periodic password reset or even manual password reset ? The task fails with the reason "Make a request to administrator to release the password for your access before attempting change password"... The only solution I can see is to use an exclusion on the account performing the password reset, but this is a bit annoying to have accounts escaping
Missing Owner column in reports.
Hi, I'm running PMP v9702, and out of box and custom reports are not showing Owner column/values in reports exported in Excel. The Owner columns and values do show on a report's Web page, but we also need them in Excel output. Is this a bug with v9702, or there is another fix. Rob
[ME User Conference, Chicago Marriott Southwest] Accelerate your journey to compliance with our privileged identity management suite
Hi All, ManageEngine User Conference Chicago's our final stop for 2018. Are you ready? Date: Oct 25 - 26 Venue: Chicago Marriott Southwest at Burr Ridge 1200 Burr Ridge Parkway Burr Ridge, Illinois 60527, USA Register now. Why privileged identity management? Privileged identities regulate access to an organization's critical IT assets. Today, with the evolution of cyberthreats, privileged identities have become a prime target for hackers; they use these privileged identities to create cracks
HPE 1920-48G
Hi, how to configure remote password reset on HPe 1920-48G Switch? Which system i should take? I need simple example :)
[Free Webinar] Utilizing enterprise-ready integrations and advanced configurations
Hi All, Our next topic for the Password Manager Pro Masterclass series is "Utilizing enterprise-ready integrations and advanced configurations," scheduled for October 18th. Click here to register for the session. This session will show you how to leverage Password Manager Pro's out-of-the-box integration options and other advanced customizations, such as integrating with enterprise ticketing systems, sending logs to SIEM tools, and invoking custom password reset listeners. Here's a quick look at
Unable to login using currently logged in AD account
Since upgrading to 9800, I have found more than one AD account that can no longer use their current logged in account to remote to resources. The option is greyed out. I fixed one account simply by deleting them from PMP and re-importing them, but I don't want to have to do that with every account, especially mine, seeing as how I'm a SuperAdmin.
SIEM Integration
Have anyone successfully integrated PMP into SIEM (ArcSight). The document available on the website are not at all informative. Does PMP supports multiple concurrent syslog forwarding?? Regards, Rakesh
Local authentication not working
When i'm trying to login using the local authentication account, admin, it is giving an error, Invalid Username/Password. I confirmed my password is correct but still i'm not able to login. Should the local authentication account needs to be a member of the Authorized Administrators? We are currently using AD authentication with 2 Factor Authentication on our environment.
No Longer able to sync or change passwords
We recently upgraded from 9100 to 9800 and now we are no longer able to sync or change local admin passwords.
[Free Webinar] Reports: Making informed business decisions based on clear track records
Hi All, Our next topic for the Password Manager Pro Masterclass series is "Reports: Making informed business decisions based on clear track records," scheduled for October 04th. Click here to register for the session. This session will help you fully utilize Password Manager Pro's comprehensive audit records and reports to gain actionable insights on password security and privileged user activity in your organization. Here's a quick look at the agenda for the seventh Masterclass session: Audits
Feature Requests
For the "Personal" section of Password Manager Pro: - Make it possible to search the personal passwords (currently, it is only possible to search by tag) - Introduce multi-line rich text fields as a custom field option
PMP and SailPoint
I'd like to know if PMP integrates with SailPoint products. Who can help me with it? Regards,
Password Manager Pro 9.8 is now available!
Hi, Password Manager Pro 9.8 (build 9800) has been released and is now available to download. This release brings forth integration support for HSM data encryption and YubiKey two-factor authentication as well as the provision to extend remote password capabilities beyond supported platforms via custom plugins. New Features & Enhancements Data encryption and protection with SafeNet HSM Password Manager Pro (PMP) now provides out-of-the-box support for SafeNet Luna PCIe HSM which gives administrators
[Free Webinar] Eliminating password hard-coding with secure APIs
Hi All, Our next topic for the Password Manager Pro Masterclass series is "Eliminating password hard-coding with secure APIs," scheduled for September 20th. Click here to register for the session. The session will help you make the most of Password Manager Pro's secure API options to get rid of embedded credentials in application configuration files and scripts. Here's a quick look at the agenda for the sixth Masterclass session: Application-to-application password management Creating API user
Stability and Reliability
Anyone else have issues with PMP? Some of my issues include: - Some of our main password reset jobs we no longer get reports. - Scheduled password reset job only runs for some resources. - Mini dump files filling up the drive from all the crashes - Schedule task resets are unreliably. If discovery fails only the AD side gets reset and report will show everything is okay. I've been working with support for 3 months on some of these issues with no end in sight. It's like every few weeks or so they
Firefox Add-On
Hi Team, i use the PMP Pro Build 9200 and the Extension for Firefox Build 1103. Since some days (Update from the Extension?!) i have the strange problem, that the Autofill works only on external websites. For all my internal resources, i dont see the buttons from the addon in the Username and Password fields. I have checked the URL in the resources, i use exactcly the same URL in my Browser as in in the Resource URL field. I have checked many interal resources and on all this i have the same problem,
API user access denied
Hi, I followed the RESTful API documentation (https://www.manageengine.com/products/passwordmanagerpro/help/restapi.html ) For testing the REST API I have created an API user to give access from serverA but I get the following error. {"operation":{"name":"Authentication","result":{"status":"Failed","message":"User is not allowed to access from this host"}}} For info PMP is also installed on serverA. Regards, Romain Joachim
Ajax load problem with Firefox
Since upgrade to build 9700 we have a problem after an new login to the password managment, the ajax request gets stuck and the page does not load. We don't have the problem with Chrome! In the debug console we see the follow errors: TypeError: form is undefined[ PassTrixMain.cc:218:9 Error: You can't insert an element into the DOM that has already been inserted ember.min.js:4 TypeError: document.getElementById(...) is null PassTrixMain.cc:143:13
Next Page