Skip to content

Commit 0877a55

Browse files
Merge pull request netwrix#543 from netwrix/tm-npsd
Version Privilege Secure Discovery docs under 2.22 and fix Linux wording
2 parents aa58aba + 19614ff commit 0877a55

114 files changed

Lines changed: 232 additions & 164 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

docs/privilegesecurediscovery/administration/_category_.json renamed to docs/privilegesecurediscovery/2.22/administration/_category_.json

File renamed without changes.

docs/privilegesecurediscovery/administration/configuration/_category_.json renamed to docs/privilegesecurediscovery/2.22/administration/configuration/_category_.json

File renamed without changes.

docs/privilegesecurediscovery/administration/configuration/accountinventorycolors.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/accountinventorycolors.md

File renamed without changes.

docs/privilegesecurediscovery/administration/configuration/addadomain.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/addadomain.md

File renamed without changes.

docs/privilegesecurediscovery/administration/configuration/addcertificateauthority.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/addcertificateauthority.md

File renamed without changes.

docs/privilegesecurediscovery/administration/configuration/adfailover.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/adfailover.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -79,8 +79,8 @@ domain
7979

8080
**CAUTION:** This is not a `full_sync`!
8181

82-
- `init_sync` will do a group flattening process, but **will not move stale objects**
83-
- `full_sync`**will not do a group flattening process,** but _will_ move stale objects
82+
- `init_sync` will do a group flattening process and **will not move stale objects**
83+
- `full_sync` moves stale objects and does not perform a group flattening process
8484
- We have decided to do an `init_sync` as this mimics what Customer Success currently does to
8585
recover from an AD failure. This feature “automates” this approach within the product.
8686

@@ -178,8 +178,8 @@ otherwise-present log fields that are in all ldap logs.
178178
| Connection has failed, failure criteria for current dc not yet met (retry attempts) | warning | "Domain Controller (DC) Failover: LDAP Sync failed - Retrying current DC | **current_dc**: server, port of current dc **fail_strategy**: "retry_attempts" **attempts_max**: Max number of retry attempts before trying the next pto a different DC **attempts_current**: number of attempts already completed |
179179
| Connection has failed, failure criteria for current dc has been met and we are movig onto the next DC | warning | "Domain Controller (DC) Failover: LDAP Sync failed - Using next DC" | **next_dc**: server, port **attempted_dcs**: server, port of attempted (and failed) dcs **remaining_additional_dcs**: server, port of additional DCs to try |
180180
| Connection has failed, failure criteria for current dc not yet met, waiting to retry | info | "Domain Controller (DC) Failover: Waiting to retry current DC" | **server**: hostname of current dc **wait_for_sec**: number of seconds waiting in between retry attempts |
181-
| Initial DC has failed, failover enabled, was able to look up additional DCs via DNS | warning | "Domain Controller (DC) Failover: Found additional DCs" | **additional_dcs:** list of alternate DCs that will be attempted (ordered by priority), comprised of server, port **additional_dc_source**: source of additional dcs, currently should just be "dns_priority" |
182-
| | warning | "Domain Controller (DC) Failover: Unable to find any additional DCs" | **additional_dc_source**: source of additional dcs, currently should just be "dns_priority" |
181+
| Initial DC has failed, failover enabled, was able to look up additional DCs via DNS | warning | "Domain Controller (DC) Failover: Found additional DCs" | **additional_dcs:** list of alternate DCs that will be attempted (ordered by priority), comprised of server, port **additional_dc_source**: source of additional dcs, currently should be "dns_priority" |
182+
| | warning | "Domain Controller (DC) Failover: Unable to find any additional DCs" | **additional_dc_source**: source of additional dcs, currently should be "dns_priority" |
183183
| Initial DC success | \* No new log added, it is already logged by svc_ldap \* | | |
184184
| Initial DC failed and failover DC has successfully synced | info | "Domain Controller (DC) Failover: LDAP Sync failover succeeded" | **initial_dc**: server, port of initial DC **attempted_dcs**: List of attempted (and failed) dcs, comprised of server, port **failover_dc**: The fail-overed dc hostname **sync_start_ts**: timestamp of sync start **sync_end_ts**: timestamp of sync end, including all faiilover attempts |
185185
| Initial DC failed and failover not enabled | error | "LDAP Sync failed" | **dc_failover_enabled**: false **error:** dict of error details **sync_start_ts**: start time of sync **sync_end_ts**: end of sync incuding all time spent in failover routine |

docs/privilegesecurediscovery/administration/configuration/advancedfields.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/advancedfields.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -145,7 +145,7 @@ The Strategy may be entered with any of following values: OS-BEST-PRACTICE, MANA
145145
146146
The OAM Name Template accepts a string with wildcards expressed by question marks (?). If left blank it will default to the currentvalue, or to "S1_ALT_??????".
147147
148-
The remaining options may be included, but must not conflict with the defined strategy.
148+
The remaining options may be included when they do not conflict with the defined strategy.
149149
150150
## Default Settings by Strategy
151151
@@ -197,11 +197,11 @@ System: VMTEMP1 [+] System: VMTEMP2
197197
198198
Linux registration prerequisites:
199199
200-
- [Linux Registrations Prerequisites](/docs/privilegesecurediscovery/requirements/technicalpreparation/linuxregistrationsprerequisites.md)
200+
- [Linux Registrations Prerequisites](../../requirements/technicalpreparation/linuxregistrationsprerequisites.md)
201201
202202
Guide on registering linux system with Postman (using API):
203203
204-
- [Postman Linux Registration](/docs/privilegesecurediscovery/requirements/technicalpreparation/postmanlinuxregistration.md)
204+
- [Postman Linux Registration](../../requirements/technicalpreparation/postmanlinuxregistration.md)
205205
206206
Troubleshooting Linux Registration:
207207
@@ -223,3 +223,5 @@ The full Excel file layout of the QuickStart file is detailed in the picture bel
223223
224224
![LOAM-S1-1824.webp](/images/privilegesecure/4.2/discovery/admin/configuration/360042878654_oam-s1-1824_941x297.webp)
225225
```
226+
227+

docs/privilegesecurediscovery/administration/configuration/applyserviceaccount.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/applyserviceaccount.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Apply a Service Account from an existing AD group Directly to a Machine
1313
## Overview
1414

1515
All interactive accounts should not have standing privilege, instead these should be using Privilege
16-
Secure to elevate access when required. This is easy to arrange with Privilege Secure. These
16+
Secure to elevate access when required. This can be arranged with Privilege Secure. These
1717
interactive groups should be set as non-persistent. However, sometimes interactive and
1818
non-interactive (service) accounts exist in the same group. In this case removing the persistence of
1919
the group would break any process or application that is using the service account. The purpose of
@@ -108,7 +108,7 @@ within the file name. Use the --dry-run flag to check that file will make the in
108108

109109
Tips
110110

111-
If Excel is unwieldly slow rows can be deleted for machines that have not been scanned. But, instead
111+
If Excel is unwieldly slow rows can be deleted for machines that have not been scanned. Instead
112112
of filtering and deleting, sort based on the last_scanned column and then delete the unwanted rows.
113113
Sorting and deleting is many times faster for Excel. This can also resolve issues with Excel
114114
crashing. Another benefit is the upload back to Privilege Secure will be faster with fewer rows.

docs/privilegesecurediscovery/administration/configuration/azuresso.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/azuresso.md

File renamed without changes.

docs/privilegesecurediscovery/administration/configuration/certificatesslfiles.md renamed to docs/privilegesecurediscovery/2.22/administration/configuration/certificatesslfiles.md

File renamed without changes.

0 commit comments

Comments
 (0)