I want to make PAM use the ALTER LOGIN for the change password by MSSQL connector in stead of sp_password stored procedure
search cancel

I want to make PAM use the ALTER LOGIN for the change password by MSSQL connector in stead of sp_password stored procedure

book

Article ID: 117241

calendar_today

Updated On:

Products

CA Privileged Access Manager - Cloakware Password Authority (PA) CA Privileged Access Manager (PAM)

Issue/Introduction



It seems CA PAM uses 'sp_password' stored procedure to change password for MS SQL Server. 
(It appears in the log when password failure.) 

The 'sp_password' is not supported feature in a future version of SQL server as the following URL page says.(Please search by the keyword 'sp_password') 
https://docs.microsoft.com/en-us/sql/2014/database-engine/deprecated-database-engine-features-in-sql-server-2016?view=sql-server-2017 

Is it possible to make PAM use the the ALTER LOGIN instead of the sp_password when the change password of the MSSQL connector?

I experience the problem when I try to change the password of the SQL server. I use the Target Application with the Target Application Type 'MSSQL'. I would like to change the password of the Azure SQL. But as the Azure SQL is unable the sp_password, the Change Password fails. I understand the PAM does not officially support the Azure SQL, as I think it uses the old procedure(sp_password), I expect to make PAM use the ALTER LOGIN instead of sp_password. 

The catalina.out says as follows. So, I understood the PAM uses the sp_password to change the password. 
---- 
9 26, 2018 3:43:17 am com.cloakware.cspm.server.app.impl.la c 
重大: UpdateTargetAccountCmd.invoke -1: Could not find stored procedure 'sp_password'. 
com.microsoft.sqlserver.jdbc.SQLServerException: Could not find stored procedure 'sp_password'.

Environment

CA Privileged Access Manager (PAM) r3.2

Resolution

The current release is not responded as per the customer expects. Asked him to raise the idea to enhance the feature in the future version.