Skip to main content

Preparation

Before Bravura Security Fabric can perform operations on an SSH target, you must:

  • Configure a target system administrator

  • Write a PSLang script

You may also need to create manual lock files when targeting SSH systems that are slow to respond, or in case of issues with requests containing multiple operations, where only one operation is failing.

Configuring a target system administrator

Bravura Security Fabric requires a designated account (for example, psadmin) on the SSH-enabled target system in order to perform operations.

You must ensure that the designated account can log into the SSH-enabled system from the Bravura Security Fabric server, and that the account has the necessary privileges to set passwords and manage accounts.

Ensure that you note the account’s login ID and password. You will be required to enter the login ID and password when you add the target system to Bravura Security Fabric .

Writing a script

The connector for Secure Shell (agtssh) supports all Bravura Security Fabric account management operations. These operations are implemented using a PSLANG script, which provides the details necessary for agtssh to interact with the SSH-enabled target system. You can write custom scripts which must be added in the <Program Files path>\Bravura Security\Bravura Security Fabric\<instance>\script\. Official, shipped scripts are included in the agent directory, and use a scripted platform definition file (.con) to call one of the binary agents. The official scripts are designed to work "out of the box", but can be modified to suit your requirements.

See more information about writing a PSLang script or modifying a sample script.

The agtssh-simple.psl sample file is intended to be used as a starting point to build a customized connector.

The sample script’s default shell is bash. You can change this by modifying the credentialoverride function in the script.

If you cannot find the sample file, try re-running setup to modify your installation. Sample files are automatically installed with complete (typical) installations. You can select them in custom installations.

Caution

Any sample script should be modified to fit your environment and prevent security exploits.