Questions tagged [cyber-ark]

CyberArk is a security software, specialized on large-scale corporate privilege access management. The software can be on-premise, cloud or hybrid. It focuses on password and secret management of users, robots, AI, etc. Post only question related to the REST API features or PrivateArk Command Line features.

CyberArk comprises of various parts:

  • CyberArk Core
    • Vault
    • PVWA (Password Vault Web Access)
    • CPM (Central Policy Manager)
    • PSM (Privileged Session Manager)
    • OPM (On-Demand Privilege Manager)
  • AAM (Application Access Management)
  • EPM (Endpoint Protection)
  • Alero (Third party access)

The tag is suitable for all programmable, automation related questions. Each of the main parts of CyberArk have REST APIs, plus CyberArk Core also has PrivateArk automation commands.

The official CyberArk documentation can be found at docs.cyberark.com.

55 questions
1
vote
1 answer

From a WCF service how can I call a method in a third party dll as the current user not IIS\DefaultApppool

I have a requirement to write a WCF service that will be called from MS Excel using the Service Moniker from VBA code. So far that part I have figured out. I also have impersonation working so that if I were to return the current user from a web…
user1735894
  • 323
  • 4
  • 16
0
votes
0 answers

How to install CyberArk PSM through automation accomplishing multiple steps with Powershell Scripts?

I want to install CyberArk PSMs in multiple server automatically with the help of powershell scripts and powershell scripts should accomplish all required steps to install PSMs until the stage of Hardening. Is it possible? I am very confused about…
S G
  • 1
0
votes
0 answers

NullPointerException using Context aware credential store of Conjur plugin 1.0.15

I am using a Jenkins instance 2.375.2 and Conjur plugin 1.0.15. I have a multi-branch pipeline. I am able to refresh credential store and see my CyberArk secrets sync’d in the ‘credentials’ tab in Jenkins UI. But when I try to fetch them using…
0
votes
0 answers

CyberArk CorePAS REST API to search for accounts

How should I use REST API to search for multiple accounts based on account name? The below API returns empty. I am assuming, it tries to match both the values passed with search query separated by space against one record and not, one value against…
0
votes
0 answers

Problem with load balancing web app (CyberArk's pvwas) with HAProxy over ssl

I have some difficulties with setting up a load balancer for a web app (CyberArk's pvwas, but i'm not sure it matters). Here is my certificate and page.cfg config file info: `Subject: CN=my.machine.name.in.DNS.A.record Subject Alternative Name: DNS…
0
votes
1 answer

CyberArk vs Azure Key vault

I was trying to understand on usages for CyberArk. Currently we are using Azure Key Vault for storing secret & credentials. Do anyone have any details when should use CyberArk or what is advantages of CyberArk over Azure Key vault.
Baharul
  • 145
  • 2
  • 16
0
votes
1 answer

CyberArk ITATS004E Authentication failure for User in python script

I'm trying to implement a python script that executes local bash scripts or simple commands on remote CyberArk machines. Here is my code: if __name__ == '__main__': for ip in IP_LIST: bash_cmd = f"ssh -o stricthostkeychecking=no…
0
votes
0 answers

Ansible task failed because of censored output

I am trying to run a task with the no_log: true attribute to keep password out of logs, but I am receiving "the output has been hidden due to the fact that 'no_log: true' was specified for this result' Failure. Here is the task: - name: set varible…
0
votes
1 answer

Assigning shell variable with Grave Accent

I have created a script which will need to pass a variable to shell file Below script when i ran in shell-> This are working as expected. i will ran in my terminal ' sh /path/shell.sh ' echo "cyberark" PasswordRetrived=0 # 0=No, 1=Yes while […
Farid Arshad
  • 334
  • 2
  • 14
0
votes
2 answers

How can I represent authorization bearer token in YAML

I have generated the access token and placed in below mentioned mount path and this token need to be included in the Authorization header when making a request against the retrieve secret endpoint. How can we achieve it in yaml…
0
votes
1 answer

How to secure conjur "api key" in ansible awx

We have requirement to secure credential with cyberArk and use it in ansible awx credential. Note:not within ansible playbook. In ansible(AWX) credential, How to secure/automate conjur "api key" without manual type
san
  • 87
  • 6
0
votes
1 answer

Read jboss datasource password from web API

My standalone.xml file in jboss server reads datasource passwords from a vault stored in the filesystem. I am configuring a new password server, where password of the account can be retrieved via a secure web API. How can I change my jboss setup to…
0
votes
0 answers

Spring Application Context add bean to retrieve password

I have a Spring Context with a bean id called batchdatasource that refer to class DriverManagerDataSource and with four properties driverClassName, url, username and password. I get the value for placeholder from an external file called…
0
votes
1 answer

Ansible hide ansible_password

I am familiar with the solution of ansible-vault feature. Our passwords are stored as a call to an external lookup (to be specific - Cyberark password). However, a regular user can still with simple debug command to see them ansible -m debug -a…
Idan Tank
  • 27
  • 5
0
votes
1 answer

Fail to connect to the provider Reason=[connect: timeout cant be negative] Cyberark

I am getting the following error when trying to get the creds via cyber-ark SDK. javapasswordsdk.exceptions.PSDKException: PDKTC006E Failed to connect to provider (Reason=[connect: timeout cant be negative], Rc=[-1]) at…
Preetam Kumar
  • 436
  • 2
  • 19