Symantec Privileged Access Management

 View Only
  • 1.  Configuring a DB2 database connection

    Posted Aug 20, 2019 11:07 AM
    Good morning,

    We are attempting to configure a DB2 database connection to do the following:

    1.  Launch an ssh connection from the GUI which connects to our primary AIX server.
    2.  Automatically SSH and connect to the selected DB2 database with credentials that are vaulted in PAM.
    3.  Establish a password rotation policy for the service account used to connect to the primary AIX server as well as resetting the DB2 database password.

    We are attempting this solution to mitigate the need to reset passwords on roughly 250 databases every 90 days.

    The challenge at this point would be checking each database's password expiration timer so that if no one logs in to the database within 90 days, PAM can automatically reset the password.

    Are there configuration options for this scenario?

    Thanks.


  • 2.  RE: Configuring a DB2 database connection
    Best Answer

    Broadcom Employee
    Posted Aug 21, 2019 01:14 PM
    Hello Don, PAM has an expired password processor that can update passwords if they haven't been changed in X days. PAM doesn't have a DB2 database target connector though. This might be a use case for the custom connector framework in the PAM 3.3 release, see https://docops.ca.com/ca-privileged-access-manager/3-3/EN/implementing/protect-privileged-account-credentials/develop-custom-connectors-for-remote-targets.


  • 3.  RE: Configuring a DB2 database connection

    Posted Aug 28, 2019 07:58 AM
    Hello Ralf,

    I believe we have the hardware requirements in place for this configuration and we are scheduling the software installation.  Is an upgrade from 3.22 to 3.3 really or can we make an attempt in 3.22? 

    Thanks.


  • 4.  RE: Configuring a DB2 database connection

    Broadcom Employee
    Posted Aug 28, 2019 11:14 AM
    Hello Don,

    The custom connector framework is a new feature of PAM 3.3,   It is not available in PAM 3.2.

    Regards,
    Margaret


    --
    Margaret Anttila | Sr Support Engineer | Broadcom Inc | margaret.anttila@broadcom.com





  • 5.  RE: Configuring a DB2 database connection

    Posted Aug 29, 2019 10:50 AM
    ​Thanks Margaret.  We will be upgrading to PAM v3.3 sometime in September.