Problem Statement:
How to perform updation of service ID password (AD ID) shared across multiple LOBs?
Issue Description:
Multiple services are configured using an AD Id eg. L1 in LOB1, In second LOB ie LOB2 multiple services are configured using AD Id Eg. L1. When we change the password for services using AD Id L1 present in LOB1, the same password should be reflected for services using AD Id L1 in LOB2.
Arcon PAM Version: 4.8.5.0 U2
Resolution:
Steps:
1) Open ARCON PAM Server Manager -> Tools -> Advanced Configuration -> Default Configuration -> Menu -> Global Configuration
2) Search for "Allow Dependency From Across LOB is Enabled" and change the value to 1.
3) Refresh Access rights and Refresh Profile settings from server manager.
4) Goto Server Manager -> Manage -> Users and Services -> Manage Services -> Select a service with L1 Id that can be defined as master service.
5) Right click on the service -> Service depends for password change -> A popup window comes up.
6) Goto tab "Service depends on this service" -> Right click on the blank space in the window -> Add new depending server -> a popup window comes up -> In the search text box All parts of service enter L1 ie AD Id for the service -> Click Search Service . This will list down all the services which are using same AD Id from all the LOBs -> Select the services that you want to add in dependency -> From password dependency type dropdown select "Change Password - Update Service Password Only" -> Click on "Select (Add)". This will add the selected services in dependency
7) Goto Server manager -> Password Manager -> Select your Server group from the drop down -> Select Service type from drop down -> Search for your master service and add the service in Password change queue -> Start Password change process.