http://www.thycotic.com/forums/messages.aspx?TopicID=362 Thycotic Community - Secret Server - Suggestion for Remote Password Heartbeat feature - Messages en-us http://blogs.law.harvard.edu/tech/rss Jitbit AspNetForum Wed, 19 Sep 2012 11:43:13 GMT Wed, 19 Sep 2012 11:43:13 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Thank you for the feedback, I have added your feature request to our log.

Kind Regards,
Joshua Conroy
]]> Wed, 19 Sep 2012 11:43:13 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Strange: When i check failed Heartbeats and manually run HB sometimes it works.

So i would like to - if i had the previously suggested and this new feature - run HB on all failed/unknown Secrets from the Report. The ones coming back failed again the next day i would check manually (maybe filtered by Template) and then disable the ones where HB can not work for any technically acceptable reason (telephone pin with HB enabled,...)

Acceptable would also be a global button to "Recheck all failed/unknown/... Heartbeats".

The Maintainance Mode (not checking HB during a specific time for specific Secrets) would be too much effort for my environment.

]]> Mon, 17 Sep 2012 04:44:04 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
A nice feature would be to auto disbale heartbeat when the account is disabled in AD and also display this info. Maybe something like a "Failed (Account disabled)" error in the last heartbeat field.

Or even better, an option to disable the account from Secret Server, as not all persons responible for 3rd party accounts have permissions to access AD.]]> Fri, 07 Sep 2012 06:55:06 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
An unknown error indicates that the machine could not be contacted and Secret Server will retry the heartbeat.]]> Wed, 13 Jun 2012 09:44:55 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Also: If my log shows "Unknown Error" after a heartbeat attempt, will it retry? Unknown Error I assume in this case is that the machine was offline.

Thanks for your help.
Michael]]> Tue, 12 Jun 2012 14:09:29 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
If the servers were down the error returned should be a Unable to Connect, which Secret Server will re-check.

I'm opening a support ticket so we can take a look at some potential solutions with you.

Ben]]> Fri, 04 May 2012 14:26:47 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
If the servers were down the error returned should be a Unable to Connect, which Secret Server will re-check.

I'm opening a support ticket so we can take a look at some potential solutions with you.

Ben]]> Fri, 04 May 2012 14:26:44 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362 I just tried the Report "What Secrets have failed Heartbeat?" and we have shocking 910 failed heartbeats there!
Mostly because the Heartbeat was checked at a time where the Servers where down for maintenance.

Any chance to get the mass-re-check feature soon? Do you have any other workaround?

Thank you,
Peter]]> Fri, 04 May 2012 05:04:56 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362 Wed, 21 Mar 2012 14:13:15 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Secret Server stops checking heartbeat on a failure to make sure that heartbeat doesn't lock out the account - we could try to be smarter about whether it was a real heartbeat failure or not but this can be difficult across all platforms (such as customized SSH commands, etc.).

I will add your interest to the feature for bulk operations to retest heartbeat.

Thanks for your feedback! :-D ]]> Thu, 26 Jan 2012 14:05:23 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362 How about a feature to re-check the heartbeat on first failure. (Additionally to the Bulk Operation feature).
I think every hour, for 3 times would be nice.

Or at a re-check all failed heartbeat command would be good also.

Thank you,
Peter
]]> Thu, 26 Jan 2012 09:38:36 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
When you click on a secret with heartbeat enabled there is a Heartbeat Enabled checkbox directly below the folder picker. If you uncheck this box and click save, the heartbeat for that secret will not be run. Does this solve your problem?

-Jacob]]> Tue, 14 Jun 2011 12:09:59 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
A vendor's password in SS is deleted, months down the road they need access again, someone forget the account was there at all because they don't think to check for deleted accounts, and then re-enters the password again and we have duplicate entries.]]> Tue, 14 Jun 2011 11:58:11 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Thanks for the suggestion. I've take these additional operations down as a feature request for review.

Ben]]> Wed, 08 Jun 2011 14:10:58 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
But it would be nice to get new Bulk operations:
enable Heartbeat
disable Heartbeat
check Heartbeat now]]> Wed, 08 Jun 2011 02:09:15 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Thanks for the suggestion; I can see how it would be useful. I've added it as a feature request for review and prioritization.

If I understand your scenario one potential option would be to delete the Secret once the account is disabled. Since it's not a hard delete, it simply changes the status, you would then be able to undelete once the account is re-activated. Then Secret Server wouldn't test heartbeat. Is this feasible for your instance?

Thanks,
Ben]]> Tue, 07 Jun 2011 15:35:03 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=362
Our policy is to disable these accounts when not in use, but we also want to track the passwords for them to make sure we have the correct ones.

The problem we're running into is when these accounts are not in use and disabled SS is throwing out Password Out of Sync alerts on the main page all the time.

A handy feature may be a flag you can set on a heartbeat enabled secret (Disabled) that would prevent it from attempting to test it's heartbeat and would disable it from alerting that it is out of sync.]]> Tue, 07 Jun 2011 07:56:37 GMT