Automated Password Rotation of Solarwinds AD account

jonathanswift

We want to implement automated password rotation for the Solarwinds domain AD account.

A different solution would change the password, it has the ability to run a script.  The Solarwinds domain AD account is stored within Solarwinds as a Windows credential.  Is there a method for changing this password, and what else would need to be done, e.g. stopping / starting any services on the pollers?

All polling is done via agents, there is no WMI / WinRM polling in place.  Some application templates may be using this domain AD account.

There is no report that I know of which can list the Nodes -> Application Template (and possibly Component) that is using a credential which isn't Inherit from Node, which would be useful in assessing where specific accounts are used.  Does anyone have some SQL to do this?

jm_sysadmin

There is a widget in this dashbaord that I use: (+) SolarWinds Orion Platform Status Overview - Modern Dashboards - The Orion Platform - THWACK 

And I have had some luck updating the the credentials store via the SDK: solarwinds/OrionSDK: SDK for the SolarWinds Orion platform, including tools, documentation, and samples in PowerShell, C#, Go, Perl, and Java. (github.com) 

Specifically with  this: Credential Management · solarwinds/OrionSDK Wiki (github.com) and if the account gets heavy use you may want to roate the entire user/pass combo not just the password. If find that if I don't swap the user (I have 1 active one waiting for the swap) you may lock the account out if you don't stop polling.