Assigning Kron PAM Credentials to Target Databases
In some cases, Kron PAM users are connected to target devices with different credentials. In other cases, there is more than one privileged user account in the target system, and different user groups use different privileged accounts to log in to target systems. The Assigned Credential feature matches the Kron PAM users with the target device users.
The following steps should be followed to configure the Assigned Credential feature. These steps enable Assigned Credential use for the device group with target databases.
- Navigate to Device Management > Device Groups.
- Right-click the desired Device Group and select Show Properties.
- Set the addAssignedCredentialToUserSelection property as “true” and click Save.
To set up Assigned Credential for different users, the SAPM accounts should be saved first. After saving the SAPM accounts:
- Configure the SAPM account for the target system.
- Navigate to User Management > Assigned Credential.
- Start typing in the username in the User text box. Matching users will appear just below. Select the one for whom another credential will be assigned.
- Select SAPM as the Credential Source.
- According to the selection, either select the SAPM Username” and click Save.
Once these steps are completed, assigned credentials will be used for the connection whenever the Kron PAM users defined in these steps are trying to open an SSH session.
Only one assigned credential must be defined for a specific database IP address for each user. If multiple assigned credentials are defined, log-in fails. Also, the SAPM accounts must be defined for specific IP addresses.