Our secure AIX servers don't allow for service accounts, and logging in with root is not going to happen.
Is there a way to run a bash script without opening an SSH Session?
Can it be done through the Agent?
I've been told that a big part of the issue is that the SW Agent doesn't have root permissions, so there is no way for it to run things on the server on its own. Doesn't allow it to do things like that, but solves other security issues of having an agent on the box.
The only way I can think of remotely executing something on a unix box without having to log in would involve something like "rsh" being executed from the Solarwinds server with the AIX box as the target, but that involves bigger security holes than service accounts IMHO.
Hmm... What about SSH keys being placed on the Solarwinds server, which would allow specific users to get in via SSH without a password, they'd have to have the key file on the SW server? If that isn't good enough, you could potentially do something like chroot the user to restrict them to a specific directory and rather than have SW actually perform the actions, have it leave what it wants to do in a file and have a cron job script parse the file and perform whatever action you want? Trying to think a bit outside the box...
