Will Centrify PAS be managing accounts for DB2 database in the future?
01-02-2019 03:13 AM
The DB2 database is widely used around the world and is used especially by banks, so Centrify PAS should support this database. Do you know when Centrify PAS will be available?
01-02-2019 08:52 AM
We provide alternative approaches to password management for DB2, hence why have not prioritized DB2 for vaulting. The approaches depend on what you want to accomplish. (Would you care to elaborate?)
Centrify provides several capabilities for DB2 databases including the following:
- User Password Plugin (to integrate with Active Directory via our Directcontrol client)
Overcomes the limitation of 8-character usernames in some DB2 versions.
- Group Plugin (to integrate and map AD groups to DB2 groups)
- SSO (GSSAPI) plugin.
Note that we also provide the ability to eliminate password management for a DB2 account by using Kerberos keytabs.
These implementations are usually tested within minutes.
Also note that if your implementation leverages PAM, a DB2 service account can be a regular UNIX service account, therefore you can use the API or if on Linux use the centrify client and the cetaccount command to checkout the password from the CLI.
All these approaches can be illustrated by your technical lead.
If you are set to do things using password management for accounts inside DB2, use the idea exchange, your tech lead or the support portal to request this enhancement.