ObjectTools supplied password must unique and secret between NetXMS users.

Started by sten, September 12, 2017, 12:12:46 AM

Previous topic - Next topic

sten

Running a small MikroTik RouterOS network and i have a few administrators that each have a unique username+password throughout the network. I set up a &winbox tool with parameters;  winbox.exe %a %U %{password}
It's important that %{password} is unique, it's hidden, it's easily replaceable.
This problem is not unique to winbox/routeros but could easily apply to another configuration tool.

Problem appears when everyone can see what custom attribute %{password} is, and it's no longer a secret. And it's not unique.
Is there a way to have unique per user password, preferably hidden away somewhere where only I can see it, but tool still function properly individually?
OR How do i go about doing something like this?

tomaskir

You can setup a password input field.
That way, your users would have to input their password when executing the object tool.

Look in the Object tools config, under Input fields.

Here is a link that explains how they can be used:
https://www.netxms.org/documentation/adminguide/object-management.html#object-tools-macro

sten

Thank you for your reply. I've considered this but the protests were loud and somewhat painful.
Any other methods? Perhaps i should raise a post as Feature Request?

Victor Kirhenshtein

Hi,

it's not possible without changes in the console. One possible option could be macro to insert user's custom attributes and UI for editing user's custom attributes. Feel free to register feature request in out tracker.

Best regards,
Victor