Thycotic Community - Secret Server - ESXi Password Support - Messages

Message from Richard K

Thu, 05 Jul 2012 19:28:28 GMT

Use vMA...
You'll need to configure vMA to integrate with AD.

Create a custom SSH RPM to do the following (I've not tested mine yet)
* ssh vma-host -l -p
* vifp addhost $MACHINE
* vicfg-user -e user -o modify -l root -p $NEWPASSWORD
* exit
* exit

Message from Matt H

Thu, 05 Jul 2012 15:02:59 GMT

Awesome! Thanks Joshua

Message from Joshua C

Thu, 05 Jul 2012 14:57:51 GMT

Currently the only way to change the password is with using SSH. I will take this down a feature request that you would be interested in seeing.

Message from Matt H

Thu, 05 Jul 2012 14:47:03 GMT

Thanks for the quick response.

I'm aware that the banner can be disabled. My hope was that SS could change the password without SSH, maybe through a VMware API or something similar. That way I could conform to the best practice of no SSH on our ESXi servers. But if there is no way around it then I guess I'll have to do it..

Thanks again

Message from Ole

Thu, 05 Jul 2012 14:34:38 GMT

Don't think you can manage ESXi passwords without ssh, but you can get rid of the yellow sign in vCenter. You do that in Advanced Settings.

Ole Thomsen

Message from Steven B

Thu, 05 Jul 2012 14:31:38 GMT

Not sure how you could do it without SSH but I do know you can turn that yellow banner off in vCenter even though SSH is enabled.

here is a link: http://communities.vmware.com/thread/326971

Message from Matt H

Thu, 05 Jul 2012 14:27:48 GMT

Hello. Does anyone use secret server to manage VMware ESX accounts? In particular, the root account on ESXi? I've noticed that everything works fine as long as SSH is enabled on the ESXi box, but enabling ssh throws up a yellow exclamation point in vCenter. I would like to keep SSH disabled if possible but still have ss manage the password. Any ideas?