Login fail after configuring SSL
Hello. I was helping one of my customers configure SSL login for Password Manager Pro. I followed the instructions from the FAQ http://www.manageengine.com/products/passwordmanagerpro/faq.html#ssl (using OpenSSL) and the certificate installs fine. When you open the console no certificate errors show, but login fails with invalid user/pass (both local admin login and AD accounts). If I switch the server.xml file back to the original and reboot the server login works again. Any suggestions?
Automatic password exports
Hi! I've found that you can automatically export passwords to dropbox, but can you automate the export process to a local file? TIA, LD
Resource grouping based on criteria
Hello, I hope someone can help. How can the following beeing achieved? The group should contain servers starting with hkg or hde and all of them have to be of type Linux. Resources name - Resource type hbbapp001 - Windows hkgmon01 - Linux hdemon06 - Linux hkgas14 - Windows Thanks in advance Dirk
Bulk Sharing in PMP
Is it possible to bulk share resources to other groups/users? I am faced with a logical reorg which currently will have us to manually re-share several hundred resources one at a time. I see that Transfer of ownership is available, but I cannot find any way to bulk share. We are on build 6600 with move to 6803 next week. Thanks!
Best way to handle a DMZ?
Hi! How do you use PMP in a DMZ? 1- install PMP in the DMZ, and do not use the LAN PMP? 2- install PMP agents, which connect to the LAN PMP? (not good since it requires a DMZ to LAN opening) 3- install a slave PMP in DMZ with database replication from LAN to DMZ? (but can a slave PMP server reset passwords? is there a way to do a partial replication of the database?) Thanks for your help, LD
After transfer ownership recipient user reports not able to access passwords
I am a PMPro Admin. UserA is inheriting resource ownership from UserB. I changed role of UserA from Password User to Password Administrator, transferred ownership from UserB to UserA, changed role of UserB from Password Administrator to Password User. UserA reports that he is not able to access passwords for these resources. However, the User Report for UserA shows he is owner (although Owned Password is checked, manage, modify password and read password are not checked). What do I need to do to
Few questions.
Is PMP works perfectly in MS IE10? What kinds of ports that PMP uses for Linux and Windows servers? (for iptable in centOS) When I test the mail, I get the "sending failed, Unable connect smtp server". Though mail sending works fine. Is this the glitch or I have to reconfigure my mailbox? Thank you in advance. Telemant Corp Sangchul Jung
Password resets failing
Hi, I am trying to reset passwords on a remote resource and can't see why it's failing. Strangely it works for some of my resources. The error thrown in Password Manager is: 1. Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. I've made sure that the PMP server can contact the remote resource by adding numerous entries to the routing table. I have just noticed that an application error is being thrown on the
Export Passwords
I seem to be at a lost as to how to export passwords (needed for as a backup for escrow) from the system. My situation is that: My account is an Administrator My account Export Settings has Encrypted HTML checked Under Admin\Customize\Export Password - Offline Access, I have: - 'Allow administrators and users to export password information to plain-text spread-sheet (.xls)" Checked - "Allow administrators and users to export passwords to encrypted HTML file" Checked Chose Tabs where Password Export
Not able to store private key
I am trying to create keystore resource type but not able to add private keys.
Problem Changing Windows Passwords
I seem to be having an unknown problem changing the administrator password on windows 2008 remotely. The password change fails in PMP with: Activity logs : 1. Access is denied. Trying to use Agent Mode : 1. Agent not installed in xxx.xxx.xxx. On the windows server side in the event viewer two events are generated. Event ID 4776, and Event ID 4625 (logon type 3....network). The former would indicate the username is correct but the password is wrong. Verifying the password via PMP succeeds and
password of the resources
Hi, There is a question that I have I have imported domain computers into PMP to manage their passwords. but while I click on the ****** (the password of those domain system) it shows me the account name not the password of system, but those I add them manually it shows me the basswood. Why is that? any suggestion? Best Regards
Administrator can no longer approve own password requests
Hello there, We have recently applied the latest upgrade packs to get us up to the latest version 6803. The issue that we have now is that administrator can no longer approve their own passwords. Has there been a change to how PMP handles this? Is there a way that we can allow administrators to approve their own passwords? Thanks
pmp - autologin helper - Network Level Authentication - w2k8
Using the autologin desktop helper to connect to a w2k8 server LaunchRDP.exe %DNS_NAME% 3389 %ACCOUNT_NAME% %RESOURCE_NAME% %PASSWORD% 0 1 0 It fails with " The remote computer requires Network Level Authentication .... " I am using a w7 system and can manually start RemoteDesktop (mstsc.exe 6.1) which connects to the w2k8 server without error. How to I enable NLA using the autologin helper
Password Verification & Reseting
We have the PMP service running under a domain admin account. I have setup a Windows Domain resource and added an existing domain ID to the resource. When I try to verify or change the password of a domain account I get the following error message. Could not verify if the password of account ztl0011qa of resource QA is in sync with the one stored in the PMP repository. Password integrity verification can be done only for resource types for which remote password reset is supported by PMP. If
Is PMP supported two differents domain?
Hi! I have domain - HQ, PMP installed in this domain, and I can add resourse from this domain and change passwords. But can I add resourse from another domain - UCCE, and do the same, change passwords and other. If yes, how can I do this? Thanks
Password Manager and network devices
Could someone help me to configure the network devices - like cisco router, switch, firewall, foundry switches, fortigate firewall, checkpoint firewall etc into the Password Manager. Does anyone has hands on experience in managing the devices. My point is that - 1) How do we enter the enable passwords - since it has no username 2) when someone request for the enabled password of the router, how to ensure that it will change and no further issues.... 3) Is it really manageable - network devices 4)
Changing passwords on accounts on computers located in child domain
I'm running PMP with domain credentials on the server. The credentials are in what we call the "parent" domain. We've added this account to the local ADMINISTRATORS group on a computer joined to a child domain (there's an inherent trust relationship in the forest). When trying to change the password on this account, we get an error: Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. My understanding
how to change IP what password manager pro is listening on?
Hi, Password manager Pro is running on server on port 443, i want to create non related web application there, on port 443, i added another IP to the server, but Password Manager Pro started listening on that IP on port also. How can i limit Password manager Pro to one IP? Thank you.
SSL certificates in PMP
Hello, I followed the process to generate and import a certificate (using keytool) in my own key store but when I try to access PMP on a browser, it does not open and tells me that the site could not be displayed. I then imported my certificate into the server.keystore key store and this time, I will be prompted to with the "untrusted connection". Could you please tell me what I should do to solve this problem and not be prompted with a certificate warning? Thanks!
Support need and potential Idea
On the Enterprise side, it is possible to archive a certificate/key store resource. There is a need/desire to accomplish the same on the Personal side. Is this already available, but not readily visible? The basic need is related to S/MIME certificate archiving. We want to use PMP as the user archive for a small sub-set of users who require External certiificates for S/MIME use. This is a non-issue for internal certificates. but is an issue for External. We would like to move away from USB sticks
HA fail with internal singed CA and port 443 on server.
Hi! Installed 2 standalone servers on the same subnet, all traffic is open between them. Creating self signed certs from internal CA on both servers. Applying the cert to both servers and the slave server cert to master server with importcert.bat. Aslong as we use port 7272 everything is fine, but if we change to 443 the HA fails according to HA section in Admin console. The master server is reachable on 443, but HA will not function correct. In Windows applicatoin event: LOG: could not send
PMP on Cisco ASA
Error on number 3. 1. Creating a telnet session to change the password 2. Successfully created telnet session with the remote host 172.16.100.100 3. Error occurring while trying to enable mode 4. Please check whether the remote login account credentials are correct
Feature Request Form Filling Feature in Personal Section
As this might prove useful to anyone here and because Manage Engine have not replied within two weeks time, I'm posting my feature request again: ### Dear Sir or Madam, I'm trying to implement Password Manager Pro at our organisation and I've been working with the tool for the better part of last week. While certain features are rather impressive, the tool fails to offer key functionalities I would expect: We need users to create entries of their own without promoting them to admin status. The only
Auto Logon Explorer
Hi All, I like to know if there is a way to set up in the home page to "detailed resource group" (like 64xx) in my scenario we prefer to read the password and not use the autologon. is there a solution? Thanks Luca
Imported resources from active directory have the wrong password.
Hello dear community i have an odd problem with password manager pro enterprise and hope that someone here can point me in the right direction. i can import accounts from AD i get all the user accounts, but all the imported passwords are wrong. what is wrong??
Password Manager Pro Upgrade Pack
When can we expect the upgrade pack 6.8 for Password Manager Pro to be released?
Alert when Pasword Access Notification is disabled
Using PMP 6701 Prem Have several Linux Resources each with a "root" user account Created a criteria based "UNIX Sys Group" when user account equals "root" Added Password Actions to notify Other User "Monk" when password is viewed or changed Now user "Monk" want to receive an alert/notification when the above password action is disabled. Basically, he wants to know when he was "opted out" of the notification system. Is this possible?
Importing Resources from Domain
I have imported Resources from Active Directory by selecting the OU, but some of my computer objects show "Resource imported from domain": domainname. While other objects have the the OU it was imported from and the complete username, not just the machine name. Example: Jackson, Chris is what is shown in the PMP Resource window, but the machine name is JACKSONC. What can I do to get only the machine name to show up and for all the imformation to show "Resource imported from domain": domainname?
why PMP won't start after restoring the Database?
Hello Team, I have an issue while restoring an old backup to the same PMP server: Steps I did: ----------------- 1. Did a backup through the GUI. 2. stopped the PMP using (sh pmp.sh stop) 3. restored the database using (sh restoreDB.sh) 4. started the PMP using (sh pmp.sh start) and have got the below error: JAVA_HOME : ../jre SERVER_HOME : ./.. DATE : Tue Feb 12 10:41:48 EST 2013 Starting Server from location: /opt/ManageEngine/PMP This evaluation copy is valid for 17 days Trying to start
Can't add users to roles after upgrade
I'm in the process of upgrading us to the latest release of PMP. I just finished the 4.6 upgrade. I had to reimport some users from AD which was not a problem. There is a user that I'm trying to assign to the Administrator role, but when I highlight the name (or any other name) and hit the arrow - nothing happens. I can remove people from a role but can't add anyone to a role. I've tried in IE and Firefox in case it was a browser issue... Please advise
Problem to configurate mail settings
Hi I have problem configurate mail settings, SMTP port 587 with authentication TLS because always say unnable connect smtp server and I write correct the name of the server. I need help
PMP - Migrated to new server - Now cert is incorrect
Hi, We recently deployed PMP to a new server following the instructions provided on the support page. Everything went swimmingly except that now the login page shows that the certificate is for the old test server instead of the new one. When looking at the server.cer file in \pmp\agent it shows the correct server name. Is there a way to update to use the correct certificate? Using version 6.6.0
Password Policy for Audit only?
Hi folks Is it possible to have a Password Policy for audit purposes only? Backghround is that we know we have systems that cannot meet our password policy, but we'd still like to record the passwords in PMP and show a non-compliance by report. There is a setting to do this upon resource creation, but as soon as the password needs changing in the resource, it is enforcing the policy? Thanks
Disable Export Password Button capability
Hello, We are in final stages of deployment and would like to disable any export of password capability. Either as a plain XLS or Encrypted HTML, OR sync with a phone. We would accept an "allow Export" capability by Super Admin. There is a concern the separated uncontrolled copy of resource passwords is not best security practice. We would like to eliminate this weakness. Is this possible, or should we propose it as a new feature? BTW: Great Product once we have figured out how to orient/train
WIndows Password resets
Hi, How exactly are windows users passwords changed automatically? I seem to recall RPC being used in conjunction with the administrator user being provided. Does this mean the admin user has to actually have the ability to RDP to the box or can RDP for the admin user be disabled. eg: As per security policy that may be in place. I have firewalls in place in my environment and I am having problems getting the windows passwords to change. I can adjust the FW to make it so if necessary. I should note
install on centos 6.3
hi, i am trying to install pmp on centos 6.3. if i try to start the pmp - i got this error: INFO | jvm 1 | 2013/01/25 14:36:21 | INFO | jvm 1 | 2013/01/25 14:36:21 | ** BEGIN NESTED EXCEPTION ** INFO | jvm 1 | 2013/01/25 14:36:21 | INFO | jvm 1 | 2013/01/25 14:36:21 | javax.net.ssl.SSLException INFO | jvm 1 | 2013/01/25 14:36:21 | MESSAGE: Unsupported record version Unknown-0.0 INFO | jvm 1 | 2013/01/25 14:36:21 | INFO | jvm 1 | 2013/01/25 14:36:21 | STACKTRACE:
Access Control with users group
Hello, I'm trying to configure Acces Control on ressources, but it seems that we can only apply such access to individual user. Is it possible te configure access Control to require "request-approval-release" for groups of users instead ? Thanks
Users without email accounts
Hello, Working to set up the PMP solution in our User Acceptance Environment and have come up against an annoyance/potential issue. Many if not most of our service accounts do not have an email address associated with said account. When manually creating accounts for testing, this has been resolved by using fake address. This may be blindingly easy but not understood. How would I set up a class or template for users to populate which would never have email addresses. Am I missing something?
Problem Configuring
Hi, I need to be able to share a resource with another group in PMP but I don't want all the usernames/passwords available in the resource to be viewable in this other group. For instance the root account should not be viewable by this other group but I can't for the life of me figure out how to make it so, or if it's even possible. Sharing individual accounts does not seem to have the affect you would think as I still appear to have to share the parent resource which ends up just sharing all the
Next Page