3.1 Configuring the Random Password Generator Job

The Random Password Generator job creates a random password for each object defined in the job’s scope. The password is generated by NMAS™ to match a Password Policy object that the job references. Generally, each driver requires a password policy designed specifically for the connected system. If you don’t have a password policy to use, you need to create one before continuing with the job configuration. The job submits the generated passwords one at a time to the driver’s Subscriber channel. The Subscriber channel policies must take action on the passwords.

  1. Make sure you’ve already added the job to the driver. If you haven’t, see Section 2.0, Adding a Predefined Job.

  2. On the General page, configure the following options:

    Enable Job: Leave this option selected unless you don’t want the job to run.

    Delete the Job After it Runs Once: Select this option if you want the job to run one time only and then be deleted.

    Servers: Select the servers where you want the job to run. Multiple servers are available only if the driver is running on multiple servers.

    Email Server: To monitor the job, you (or others) can receive e-mail notifications whenever certain results occur for the job. You configure e-mail notification on the Results page. However, to enable this e-mail notification to work, you must first specify the e-mail server that will be used to send the notifications. Click the button to locate and select the Default Notification Collection object or any other notfTemplateCollection object that defines an SMTP mail server.

    Display Name: Displays the name assigned to the job.

    Description: Displays the description assigned to the job.

  3. On the Schedule page, select one of the following options:

    Run on a Schedule: Runs the job on a daily, weekly, monthly, or yearly schedule. You can also specify a custom schedule; use the crontab standard when specifying a custom schedule.

    Run Manually: Runs the job only when you initiate it through the Run Now option (see Section 5.0, Starting a Job).

  4. On the Scope page, click Add to add the objects for which you want to generate passwords.

  5. On the Parameters page, fill in the following fields:

    Password Policy Object Used for Password Generation: Select the Password Policy object you want to use to generate the passwords. NMAS uses the password policy to generate the passwords. Generally, each driver requires a password policy designed specifically for the connected system. If you don’t have a password policy to use, click OK to save the job’s current configuration, then create a password policy.

    Generate a Password for Objects without a Driver Association: This is set to False by default. If you added objects to the Scope page that are not associated with objects in the driver’s connected system, and you want to generate passwords for these objects, select True.

  6. On the Results page, define the actions you want performed based on the results for the job.

    Each time the job runs, it generates Intermediate results and a Final result. The possible results are Success, Warning, Error, and Aborted. Intermediate results are generated at various points throughout the job. The Final result is generated when the job is finished. For each result, you can specify the action you want performed when it occurs: 1) generate an event for Novell® Audit or Novell Sentinel™ and 2) generate an e-mail notification. For example, you might want no action to occur for an Intermediate Success result and an e-mail notification to be sent for an Intermediate Error result.

    To define an action for a result:

    1. Click the No action link next to the result to display the Result Notification dialog box.

    2. Select Audit result if you want to generate an event for Novell Audit or Novell Sentinel.

      or

      Select Send email, then fill in the recipient and e-mail template information.

    3. Click OK to save your changes.

  7. When you have finished configuring the job, click OK to save your changes.

    The job is added to the job list.

  8. Select the job in the list (by selecting the check box next to the job name), then click Get Status.

    The Job Status dialog box displays any configuration errors. Because the job requires rights to the driver object and those rights have not yet been granted, you see an Insufficient rights to driver object error.

  9. Click Grant rights, then click OK to confirm the action.

  10. If other errors are displayed, resolve the errors. Otherwise, click Close to close the Job Status dialog box.