Mar 15, 2015

ispim posix custom adapter regular change password policy

several days ago, was so hectic with company policy that force everybody to change password periodically, its also force IBM Tivoli Identity Management (ITIM) to change password, either for adapter or accounts.

well, its little bit complicated to comply with, let we see simple suggestion solution here.

SACLI check out password for machine to machine

first step, you must checked-out the password from ITIM database use SACLI mechanism, once you get it, you need pass it to script pool. For this step, better you create new simple approval workflow on ITIM, its make you check out password easily.

Script pool ITIM adapter for change password

this is the second steps, for large numbers of target systems, you need make it generally-usage-able for all target systems,so it able to change password for Unix, linux, solaris, windows, etc.

Basic function of this parts is login with current username and password, then change the password. On Success, it will report to auto-reconcile subsystem to do his jobs then.

Ispim Auto reconcile

Its an automation to reconciling what the script has done.

Periodically change password ITIM

due to company policy, you must run it regularly base on company deadline to change password.


IBM ispim itim posix custom adapter regular change password policy


.
several days ago, was so hectic with company policy that force everybody to change password periodically, its also force IBM Tivoli Identity Management (ITIM) to change password, either for adapter or accounts.

well, its little bit complicated to comply with, let we see simple suggestion solution here.

SACLI check out password for machine to machine

first step, you must checked-out the password from ITIM database use SACLI mechanism, once you get it, you need pass it to script pool. For this step, better you create new simple approval workflow on ITIM, its make you check out password easily.

Script pool ITIM adapter for change password

this is the second steps, for large numbers of target systems, you need make it generally-usage-able for all target systems,so it able to change password for Unix, linux, solaris, windows, etc.

Basic function of this parts is login with current username and password, then change the password. On Success, it will report to auto-reconcile subsystem to do his jobs then.

Ispim Auto reconcile

Its an automation to reconciling what the script has done.

Periodically change password ITIM

due to company policy, you must run it regularly base on company deadline to change password.


IBM ispim itim posix custom adapter regular change password policy

No comments:

Post a Comment