LDAP User Imports
Hi, We manually import users via LDAP. Two questions: 1. Can the LDAP details be saved rather than entering URL, search criteria, etc, etc, every time I run an import? 2. If the details can be stored, can I then schedule a user import task to run automatically? Grateful for an idea of whether this is something on the PMP roadmap and in what timescale? Thanks.
PMP Integration and Cisco ASA 5520
Hola: Es posible integrar el PMP con un Cisco ASA 5520 para la gestion de 3600 usuarios que utilizaran el acceso VPN SSL del ASA. La idea es restablecer las contraseñas desde el PMP y utilizar el PMP como servidor de AAA.
Setting up XML-RPC access
Hi, I am attempting to prove the XML-RPC API can be used in our organisation. I am having trouble with getting the necessary certificates set up. In the API user screen, does it matter which certificate is entered for the XML-RPC API access? Is the .pfx ok, or does it need to be a public .cer? I have my client making a successful connection to the server via SSL but when I submit the query (pmp.password.retrieve) it returns no data in the result - just an empty string, content length = 0. The logs
Has anyone used PMP with managing SAP and/or Lotus Notes passwords?
Looking for experiences.
Question about LDAP user groups / API for controlling groups
Hi, We are a major provider of Internet services and are looking to integrate Password Manager Pro in our environments to have better auditing, and access control to our systems. As we have a lot of people working on different environments we are in need of a system where we easily can manage access control. We have our users and groups stored in LDAP, and need a system which can handle rapid changes in whom to give access. As i understand Password Manager Pro will today import users from LDAP based
Unable to upgrade on 6303 from 6302
Hi, I am currently on PMP 6302 and trying to upgrade on 6303. After sucessful patch installation (i terminated mysql process before and after upgradation process) I am unable to start PMP service as it again stops automatically. I have attached my logs folder, please check & suggest. Unable to attach logs here due to its huge size i.e. 27MB. Let me email logs at passwordmanagerpro-support@manageengine.com Regards,
LDAP groups/roles or API for Group/Role administration
Hi, We are a major provider of Internet services and are looking to integrate Password Manager Pro in our environments to have better auditing, and access control to our systems. As we have a lot of people working on different environments we are in need of a system where we easily can manage access control. We have our users and groups stored in LDAP, and need a system which can handle rapid changes in whom to give access. As i understand Password Manager Pro will today import users from LDAP based
Empty Resource (without account name) on PMP Agent Installation
Hi, I want PMP to automatically add account "Administrator" and configure it for password reset whenever I install PMP Client on any workstation. Currently I have 4000 of machines and I am planning to deploy PMP agents. Please suggest a way to achieve this task as currently when I am trying to install PMP agent on any workstation it's just adding Resource name in PMP server and I have to manually add "Administrator" account for password reset. Also let me know if there is any report available which
Problem in creating replica
Hi, I am trying to build replication pack on my primary server with the below command: (I executed the command from PMP/Bin folder and before running the cmd I stopped PMP service and checked for mysql-nt process which was terminated) HASetup.bat pmpreplica but its giving error "unknown Host." etc I am on PMP 6302. I have attached logs folder, kindly check. Regards,
Update from 6201 to 6300 successfully completes - service successfully starts - https://localhost/ never loads
Password Manager Pro A working HA implementation of 6201 following the below steps fails to successfully upgrade the primary to 6300 (in the sense that after 6300 is installed, the service is never reachable via https://localhost/). (Please Note: I'm aware that once the installation starts, the HA aspect no longer "counts", however, I'm listing all steps taken here to show that there are no issues with the servers still communicating). 1. Stop PMP service on both servers 2. Take a backup of C:Program
Local account password change not using admin credentials
I'm having difficulty resetting local passwords on my Windows resources. I bulk imported some resources from the domain. So the local accounts discovered for each resource don't have the correct passwords. I set the resource to supply credentials for remote synchronization and set it to the administrator ID. I also update the administrator ID in PMP and the password validates as "in sync". If I try and change the password of any other local account on that resource, it doesn't work. It
Can't delete any resource or resource group
Hello, I'm trying to test out the application but I am unable to delete any resources or resource groups. Whenever I try to do so I am taken back to the login screen.
PMP ports used by agentless remote password reset / change traffic
We have a secure network with firewalls between our VLANs. We do not install PMP agents on our Windows systems. We would like to reset the local accounts on servers that are members of a domain. We are looking for a listing of ports and protocol that needs to be opened between the PMP and the target server. I'm aware there are some dynamic port ranges here, and unfortunately statically setting them hasn't worked for me yet. I'd like some help from support regarding this, and feel it's a good
Blank page after upgrade
I upgraded my server (Windows 2003 Sp2) to version 6.3 build 6303 and now when I go to the website (https://server:7272) I get a blank page and it is stuck on the address https://server:7272 /ntlmv2?redirectURL=j_security_check. I don't even get a login box. Any help would be appreciated.
Importing multiple accounts to existing Resource?
We would like to add multiple accounts to an existing Resource, how can we do that?
Automated Password Approval
Can the “Access Control Workflow” functionality of PMP be accessed via the API? In particular, can the approval of a "Password Access Request" be automated? Thanks.
How to move an account from one resource to another?
We have several accounts that are in the wrong resource and would like to move the accounts to a different resource, however, corporate policy dictates that we cannot save account passwords in files so ideally we don't want to have to export and then re-import.
Install Password Manager Pro on Windows 7 Pro?
Will Password Manager Pro work on Windows 7?
Ophaned/legacy user report
I'm hoping someone can nudge me in the right direction. Is there a way via the gui or db to track down users who do not have direct access to a shared resource/group, or are not a member of a user group? We've got 1000 users in the db already (expect it to reach 2000) and I'm nearly certain there are a good number who've been imported in error. All it takes is an accidental '*' in our ldap import string and a couple hundred extra users appear in the user list. Likewise is there a way to track down
User Membership Report?
I'm hoping someone can nudge me in the right direction for a user group membership to resource group mapping report Not interested in what particular resources they can touch, just who is in what user group and what resource groups those user groups are mapped against. So far we have 40 resource group and I expect it'll grow to about 100, so looking for a simple top level report. The intent of report is to share with the team leads so at a group level they can easily check that membership lists
Import Resource Groups
Hi, I was wondering i there is a way to import a large amount of resources which I know is possible but I would also like them to be imported into specific resource groups without have to set up all the groups initially. Is this possible? Thanks
Resource Group Import
Hi, Is it possible to import the resource group? I was hoping to be able to do this via the department / location fields but it does not appear that I can do this. Thanks in advance
Password Manager Pro - Android app
Hi, I would just like to let the community know about a new android application that I have recently released called passFly. This application is a simple interface for the popular password manager pro. I created this application because as a sysadmin sometimes I would be in a remote location and need access to a password directly at a servers console, but I would not have my laptop with me. Feel free to check it out on the android market, just search for passFly. There is also a website that details
Transfer a user/password between resources?
Is there a way to transfer accounts between resources? I'm in the situation where I will have many 'unowned' passwords imported from legacy systems, and often they will be under generic resource names (eg 'FedEx Windows'). I could cludge it and have each user/pwd assigned to a single resource (eg FedEx1, FedEx2, ...) but it just gets messy and unintuitive for end users. As owners come forward and claim these orphaned accounts I will need to move them to the appropriate managed resource. Equally
Resource Import - importing data which doesn't exist
I'm working on importing a 1000 line spreadsheet of resources / accounts. Each resource has ~10 accounts under it which are all unique. I've got 6 fields I'm importing: Resource, Department, Client (custom added field), Group (custom added field), Username, and Password. When I do the import I end up with about 200 extra passwords in the system - it looks like there is a problem with the custom added fields being imported properly as I see custom fields which do not have the right values. I've checked
Custom Reports: Selected recipients are not saved
Hi, we came across a bug when trying to schedule a custom report. Users selected as recipients of the report under "other users" are not saved when saving the schedule. When you reopen the schedule and open the "select / view" dialogue the list of selected users is empty. We solved the problem by selecting "email ids" and entering the users' mail addresses. Still, a fix would be nice. Regards, Dennis
LDAP redundancy
When will we be able to have LDAP redundancy? In a 24x7 enterprise shop we cannot afford to have a single point of failure against a single LDAP host (which hit me today). I have been able to cludge it by changing the AaaLDAPAdapter table while waiting for support to respond, but that's not a suitable solution if my ldap host goes offline at an unsociable time like 2am Sunday. I can see back in 2007 it was a to-do item. http://forums.manageengine.com/topic/ldap-servers-specification Ta, Jeff.
Unable to assign a resource to a managed resource group
I have a user set to manage a particular resource group. But when that user logs on and creates a resource, they are unable to see the managed resource group in the group name drop-down box. How do i resolve this?
Install to web hosting server
Do you know anybody, how to install password manager to the web hosting server ? I know that there is a debian but I have only web admin acces.. ther is no console for install a bin file. Thanx
Switch from windows to linux
Hi All, 1st best wishes :) I have now running PMP on my windows desktop (free version). I have now a linux machine and want to move the PMP to Linux. I already tried to use "export all passwords" and then import them in linux but not all passwords are transferred. Now I get 1 big list of passwords (missing 75 resources). Is there a way that I can convert the Windows PMP DB to Linux PMP DB? I have about 250 passwords, I really hate the idea to put them in manually....
Requests for password only goto one admin
We are trialing the software so using the eval version (version 6.3.0 build 6303). I have added the account and password data through the default admin login and created a new admin login called simon. When the guest account makes a request for a password, the only account that can see the request is admin not simon (through Admin, Users then Password Access Requests). Is there a way that any admin can see and approve/reject the request because when we go live there will be 5+ admins and if
Password exports cause a line wrap with long 'notes' entries
If the 'notes' entry of a password has multiple lines, it causes a line feed in the .csv export. Maybe if you wrap it up in bunnies " so that excel treats it as a line feed within the cell and not a new record. Ta, Jeff.
Session timeout problem, gotta login twice
I am having trouble logging on to PMP after my session has timed out. When the session times out I get thrown back to logon screen. I punch in my username/pw and I get same loginscreen with no errors, just username/pw cleared from form. Try logging on again and I get logged on just fine. This does not happen when I log on first time, and it does not happen when I log out and back in. My PMP is configured for SSL on port 7272 and I'm logging on with LDAP auth on my domain controller. I've confirmed
100% CPU use after installing Password Manager Pro
On my system, after installing PMP java have started using all available CPU for long periods of time (minutes). This slows down other applications on the system, and also slows down PMP operations. Can't find any specific action that trigges this excessive CPU use, but when i stop the service the system returns to 2-15% CPU.
Security Nightmare: Database Encryption in Password Manager Pro is useless by default or when using HA
By default the bundled mysql database in Password Manager Pro is using mysql binlogs, so every sql statement of the application is written in plaintext on the disk ("mysql-bin.*" files in mysql data directory). Unfortunately Password Manager Pro doesn't encrypt the user accounts and passwords in the application, but encrypt the data with the AES_ENCRYPT() function in mysql. In combination with activated mysql binlogs (active by default and needed for HA*) that means every user account and password
Move PMP installation to new servers and domain
Hi team, Soon my organisation will be migrating all our services from one set of servers and domain, to a new set of servers and domain. We want to migrate our current PMP environment to the new domain, and want to know what the best process is to do this? Current environment: Windows 2K3 Server running PMP 6.0 with High Availability. New environment: Windows 2K8 R2 Server running PMP current version with High Availability. Also are there any pitfalls to be aware of as part of the migration
Feature Request
Hi I would like to request for a feature related to the time of password used. 1) The user should have an option to request for certain time, in case, they want to extend, it has to be mentioned. "The said password is set to use for 30 minutes from the time user checks-in, if you want to specify the duration, please specify" This would help the administrator to request an extended time if required. 2) The password manager should have the authority to accept or limit the time to default 30 minutes,
Permissions for Adding Passwords to Resource Groups
Is it possible for somone with modify access to a resouce group to add passwords? I'd prefer not to give somone manage access.
ManageEngine Password Manager Pro 6.3 Released
Hi, We are glad to announce the release of Password Manager Pro 6.3 (build 6300). We take this opportunity to thank all our customers and users for their feedback and the continued support. Highlights of Password Manager Pro 6.3 PhoneFactor Authentication ManageEngine has partnered with PhoneFactor, the leading provider of phone-based two-factor authentication for two-factor security for Password Manager Pro. Smart Card Authentication If you have a smart card authentication system in your environment
SQL Server Database
Hi Can you tell me if this product can use a MS SQL Server 2000 or 2005 as it is the corporate policy not to use MYSQL at the moment - Thanks
Next Page