A Reconcile Account on CyberArc should be a member of ACLGROUP $XIC_OWNER
For changing and/or reconciling PASSWORD requests from CyberArk, XTR will perform the actual password change actions in Safeguard as a privileged user account such as 255,255. So, a service account, which is a 'Reconcile Account' on CyberArk, can be any group and any user id.
Because a 'Reconcile Account' will be used to do logon to NonStop for an XIC connection via XTR, it should be specified as a member of the $XIC_OWNER ACLGROUP in the TRACL file. If a 'Reconcile Account' in CyberArk is SEC.ADMIN, then it should be a member of the 'ACLGROUP $XIC_OWNER.' For example ACLGROUP $XIC_OWNER $OWNER SEC.ADMIN
Note: the UserID in CyberArc is an OSS ID.
For example, the OSS ID of G111.U222 (111,222) is 28638 ((111 * 256) + 222)
Related Articles
XTR: Error Message Message "XTRAUTH: Access denied. Contact your security administrator. TASK/ACL: NETWORK LEVEL: <XTR ACLGROUP NAME>
These XTR error messages are returned by the XYGATE GUIs. <XTR ACLGROUP NAME> can be any valid ACLGROUP name configured in the TRACL file, e.g. $OWNER, $REPORTERS, $SM_MAINT_OBJECTS. Example: XTRAUTH: Access denied. Contact your security ...
XTR: Change the owner of XTR installation.
Step 1: Change the owner of non SQL files in the XTR installation Command; FUP GIVE <$vol>.<xygatetr>.* WHERE NOT SQL AND NOT OWNER = <new-owner>, <new-onwer> Step 2: Change the owner of SQL Catalogs in the XTR installation Command; SQLCI ALTER ...
XIC: Is XIC compatible with CyberArk version 12.2?
As of XIC 1.30, CyberArk 12.2 works with all available versions of XIC. If this article did not provide a solution, please open a case with our support team by sending an email message to support@xypro.com.
XIC: Updating certificates in the XIC_HPE.jks
1. Grant WRITE permissions on the XIC_HPE.jks and its related files, such as XIC_HPE_EP.ssl, XIC_HPE_PrivatePair.pem, and XIC_HPE_PubKey.pem 2. Execute the 'importCert.sh' script in the XIC installation's base directory, for example, ...
XIC: Where can the XIC log files be found?
There are three XIC log files: access.log error.log http.log The full log name will be in the following format: xic_<instance>_xxxx.log Where: <instance> is the name of the XIC instance provided at the time of installation. Usually, this is the name ...