 |
|
|
PGS does not require significant implementation work other than linking userids together according to editable mapping rules or to the subscriber-based mappings. This module may be installed on its own or implemented with Account Geneous - More Information ...
PASSWORD GENEOUS is a sophisticated multi platform tool providing transparent and secure distributed User Password Management and Synchronization. Users need only remember one “Enterprise” password to access any number of computers. Password sync ensures that however a user changes their password at any managed platform or application, the new password is securely propagated to all the hosts to which the user has been authorized. A clear and easy to use interface simplifies the set-up and maintenance of the rules that allow Account Geneous users to manage host resources and user access. Because users do not need to remember more than one password at any time, they will not need to write them down, and PASSWORD GENEOUS will encourage the use of non-trivial passwords, helping to reduce the risk of trial and error brute force security breaches.
PASSWORD GENEOUS intercepts passwords when they are changed, using the interceptor feature of the Account Geneous Agent. For instance, in a Microsoft Active Directory (AD) or domain environment, this can be run on the domain controllers. When a user updates this password on a computer that has PASSWORD GENEOUS agent installed, the new password is trapped by the Password Interceptor feature of that agent. This new password is transmitted in an encrypted form to the Password Controller/Propagator, a module of the Account Geneous server. The strong encryption used by all the AG communications ensures that password secrecy is maintained. The Password Propagator module of the Account Geneous server determines from the rules how to propagate the password change to target hosts for which the user has access. Note: Active Directory (AD) and Domain user accounts are maintained by a Windows Server system. This server acts as the controller for the domain specified by the user during the login process, so the user is not authenticated by the workstation that he is using. When a user changes this password, the actual password change does not take place on the local machine but on the domain server. In this case the Password Interceptor running on the domain server traps the new password, and then forwards the modified password to the Password Propagator for synchronization.
1. User resets his password through the machine-specific interface 2. The AG password interceptor detects this password change and sends it to the AG Server 3. The AG password propagator reads the rules for propagation from the HR database (3a) or it's own editable rules repository (3b) 4. The AG Propagator sends the password changes to the target machines
PASSWORD GENEOUS allows a sophisticated rule base to be created that provides complete control over password propagation. The rules apply user defined tests to match incoming password change notifications. When a match is found, the appropriate user-defined actions are applied. The actions specify the accounts on remote systems that need to be updated for the specified password change notification. Full wildcard matching is supported against incoming password change notifications, as is matching against user names, node names, Windows local or global groups, OpenVMS UICs etc. You can also specify logically associated groups of hosts, which can be referenced by a mnemonic host group name. This host group name can be used in rules as part of either tests or actions. Another important source for these rules is the Subscriber Database itself. If the customer decides to use subscribers, then each person (subscriber) can have the passwords synchronized between all of his assigned platform accounts. The rules database can be exported and imported to allow backup, merging, copying and updating of the database. PASSWORD GENEOUS offers a convenient GUI for editing and adding new rules according to the specific needs.
Minimum requirements:
|
 |
|
