Registering AD binding accounts in UNAB

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Is there a way to change UNIX binding account without re-registering all agents?

 

Resolution

No, not at this time. The AD binding account is used to provide the UNAB agent with a secure communication method to the Active Directory. The registration process uses kerberos authentication which would require re-registering the UNAB endpoint to authenticate the new bind account.