Documentation
Table of Contents
1 CyberArk §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú?§Ñ
§°§Ó§Ñ? §à§Õ§Ö?§Ñ§Ü §à§Ò?§Ñ§ê?§Ñ§Ó§Ñ §Ü§Ñ§Ü§à §Õ§Ñ §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ê§Ö§ä§Ö Áú»¢¶Ä²© §Õ§Ñ §á§â§Ö§å§Ù§Ú§Þ§Ñ §ä§Ñ?§ß§Ö §Ú§Ù CyberArk Vault CV12.
§´§â§Ö§Ù§à§â §ä§â§Ö§Ò§Ñ §Õ§Ñ §Ò§å§Õ§Ö §Ú§ß§ã§ä§Ñ§Ý§Ú§â§Ñ§ß §Ú §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ§ß §Ü§Ñ§à §ê§ä§à ?§Ö §à§á§Ú§ã§Ñ§ß§à §å §Ù§Ó§Ñ§ß§Ú§é§ß§à? .
§¥§Ñ §Ò§Ú§ã§ä§Ö §ã§Ñ§Ù§ß§Ñ§Ý§Ú §Ó§Ú§ê§Ö §à §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ?§å TLS-§Ñ §å Áú»¢¶Ä²©-§å, §á§à§Ô§Ý§Ö§Õ§Ñ?§ä§Ö §³§Ü§Ý§Ñ§Õ§Ú§ê§ä§Ö?§Ö §ä§Ñ?§ß§Ú.
§¬§â§Ö§Õ§Ö§ß§è§Ú?§Ñ§Ý§Ú §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ
§±§â§Ú§ã§ä§å§á §ä§Ñ?§ß§Ú §ã§Ñ §Ü§â§Ö§Õ§Ö§ß§è§Ú?§Ñ§Ý§Ú§Þ§Ñ §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ ?§Ö §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ§ß §Ù§Ñ §ã§Ó§Ñ§Ü§å Áú»¢¶Ä²© §Ü§à§Þ§á§à§ß§Ö§ß§ä§å §á§à§ã§Ö§Ò§ß§à.
§³§Ö§â§Ó§Ö§â §Ú §á§â§à§Ü§ã§Ú?§Ú
§¥§Ñ §Ò§Ú§ã§ä§Ö §Õ§à§Ò§Ú§Ý§Ú §Ü§â§Ö§Õ§Ö§ß§è§Ú?§Ñ§Ý§Ö §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ §Ú§Ù §ä§â§Ö§Ù§à§â§Ñ §Ù§Ñ Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â §Ú§Ý§Ú §á§â§à§Ü§ã§Ú, §ß§Ñ§Ó§Ö§Õ§Ú§ä§Ö §ã§Ý§Ö§Õ§Ö?§Ö §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§à§ß§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö §å §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§à§ß§à? §Õ§Ñ§ä§à§ä§Ö§è§Ú:
Vault- §Ü§à?§Ú §á§â§à§Ó§Ñ?§Õ§Ö§â §ä§â§Ö§Ù§à§â§Ñ §ä§â§Ö§Ò§Ñ §Ü§à§â§Ú§ã§ä§Ú§ä§Ú;VaultURL- HTTP[S] URL §ã§Ö§â§Ó§Ö§â§Ñ §ä§â§Ö§Ù§à§â§Ñ;VaultDBPath- §å§á§Ú§ä §Õ§à §ä§Ñ?§ß§Ö §ä§â§Ö§Ù§à§â§Ñ §Ü§à?§Ñ §ã§Ñ§Õ§â§Ø§Ú §Ü§â§Ö§Õ§Ö§ß§è§Ú?§Ñ§Ý§Ö §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ §Ü§à?§Ú ?§Ö §Ò§Ú§ä§Ú §á§â§Ö§å§Ù§Ö§ä§Ú §Ü?§å§é§Ö§Ó§Ú§Þ§Ñ "Content" §Ú "UserName" (§à§Ó§Ñ §à§á§è§Ú?§Ñ §ã§Ö §Þ§à§Ø§Ö §Ü§à§â§Ú§ã§ä§Ú§ä§Ú §ã§Ñ§Þ§à §Ñ§Ü§à DBUser §Ú DBPassword §ß§Ú§ã§å §ã§á§Ö§è§Ú§æ§Ú§è§Ú§â§Ñ§ß§Ú);VaultTLSCertFile,VaultTLSKeyFile- SSL §ã§Ö§â§ä§Ú§æ§Ú§Ü§Ñ§ä §Ú §ß§Ñ§Ù§Ú§Ó§Ú §Õ§Ñ§ä§à§ä§Ö§Ü§Ñ §Ü?§å§é§Ö§Ó§Ñ; §á§à§ã§ä§Ñ§Ó?§Ñ?§Ö §à§Ó§Ú§ç §à§á§è§Ú?§Ñ §ß§Ú?§Ö §à§Ò§Ñ§Ó§Ö§Ù§ß§à, §Ñ§Ý§Ú §ã§Ö §á§â§Ö§á§à§â§å§é§å?§Ö;VaultPrefix- §á§â§Ú§Ý§Ñ§Ô§à?§Ö§ß§Ú §á§â§Ö§æ§Ú§Ü§ã §Ù§Ñ §á§å§ä§Ñ?§å §ä§â§Ö§Ù§à§â§Ñ §Ú§Ý§Ú §å§á§Ú§ä, §å §Ù§Ñ§Ó§Ú§ã§ß§à§ã§ä§Ú §à§Õ §ä§â§Ö§Ù§à§â§Ñ; §Ñ§Ü§à §ß§Ú?§Ö §ß§Ñ§Ó§Ö§Õ§Ö§ß§à, §Ü§à§â§Ú§ã§ä§Ú?§Ö §ã§Ö §ß§Ñ?§á§à§Ô§à§Õ§ß§Ú?§Ñ §á§à§Õ§â§Ñ§Ù§å§Þ§Ö§Ó§Ñ§ß§Ñ §Ó§â§Ö§Õ§ß§à§ã§ä.
Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â §ä§Ñ§Ü§à?§Ö §Ü§à§â§Ú§ã§ä§Ú §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§à§ß§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö Vault, VaultURL, VaultTLSCertFile §Ú VaultTLSKeyFile §Ú VaultPrefix §Ù§Ñ §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú?§å §ä§â§Ö§Ù§à§â§Ñ §á§â§Ú§Ý§Ú§Ü§à§Þ §à§Ò§â§Ñ§Õ§Ö §ä§Ñ?§ß§Ú§ç §Þ§Ñ§Ü§â§à§Ñ §ä§â§Ö§Ù§à§â§Ñ.
Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â §Ú Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú §é§Ú§ä§Ñ?§å §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§à§ß§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö §Ü§à?§Ú §ã§Ö §à§Õ§ß§à§ã§Ö §ß§Ñ §ä§â§Ö§Ù§à§â §Ú§Ù §Õ§Ñ§ä§à§ä§Ö§Ü§Ñ zabbix_server.conf §Ú zabbix_proxy.conf §ß§Ñ§Ü§à§ß §á§à§Ü§â§Ö§ä§Ñ?§Ñ.
§±§â§Ú§Þ§Ö§â
- §µ zabbix_server.conf, §ß§Ñ§Ó§Ö§Õ§Ú§ä§Ö §ã§Ý§Ö§Õ§Ö?§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö:
Vault=CyberArk
VaultURL=https://127.0.0.1:1858
VaultDBPath=AppID=zabbix_server&Query=Safe=passwordSafe;Object=zabbix_server_database
VaultTLSCertFile=cert.pem
VaultTLSKeyFile=key.pem
VaultPrefix=/AIMWebService/api/Accounts?- Áú»¢¶Ä²© ?§Ö §á§à§ã§Ý§Ñ§ä§Ú §ã§Ý§Ö§Õ§Ö?§Ú API §Ù§Ñ§ç§ä§Ö§Ó §å §ä§â§Ö§Ù§à§â:
curl \
--header "Content type: application/json" \
--cert cert.pem \
--key key.pem \
https://127.0.0.1:1858/AIMWebService/api/Accounts?AppID=zabbix_server&Query=Safe=passwordSafe;Object=zabbix_server_database- §°§Õ§Ô§à§Ó§à§â §ä§â§Ö§Ù§à§â§Ñ ?§Ö §ã§Ñ§Õ§â§Ø§Ñ§ä§Ú §Ü?§å§é§Ö§Ó§Ö "Content" §Ú "UserName":
{
"Content": <password>,
"UserName": <username>,
"Address": <address>,
"Database": <Database>,
"PasswordChangeInProcess":<PasswordChangeInProcess>
}- §¬§Ñ§à §â§Ö§Ù§å§Ý§ä§Ñ§ä §ä§à§Ô§Ñ, Áú»¢¶Ä²© ?§Ö §Ü§à§â§Ú§ã§ä§Ú§ä§Ú §ã§Ý§Ö§Õ§Ö?§Ö §Ñ§Ü§â§Ö§Õ§Ú§ä§Ú§Ó§Ö §Ù§Ñ §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú?§å §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ:
- §¬§à§â§Ú§ã§ß§Ú§é§Ü§à §Ú§Þ§Ö: <username>
- §§à§Ù§Ú§ß§Ü§Ñ: <password>
§¬§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã
§¥§Ñ §Ò§Ú§ã§ä§Ö §Õ§à§Ò§Ú§Ý§Ú §Ñ§Ü§â§Ö§Õ§Ú§ä§Ú§Ó§Ö §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ §Ú§Ù §ä§â§Ö§Ù§à§â§Ñ §Ù§Ñ Áú»¢¶Ä²© §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã, §ß§Ñ§Ó§Ö§Õ§Ú§ä§Ö §ã§Ý§Ö§Õ§Ö?§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö §ä§à§Ü§à§Þ §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã §Ú§ß§ã§ä§Ñ§Ý§Ñ§è§Ú?§Ñ.
- §µ §Ü§à§â§Ñ§Ü§å Configure DB Connection, §á§à§ã§ä§Ñ§Ó§Ú§ä§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§Ñ§â Store credentials in §ß§Ñ "CyberArk Vault".
- §©§Ñ§ä§Ú§Þ §á§à§á§å§ß§Ú§ä§Ö §Õ§à§Õ§Ñ§ä§ß§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö:
| Parameter | Mandatory | Default value | Description |
|---|---|---|---|
| §¬§â§Ñ??§Ñ §ä§Ñ§é§Ü§Ñ API-?§Ñ §ä§â§Ö§Ù§à§â§Ñ | §Õ§Ñ | https://localhost:1858 | §¯§Ñ§Ó§Ö§Õ§Ú§ä§Ö URL §Ù§Ñ §á§à§Ó§Ö§Ù§Ú§Ó§Ñ?§Ö §ã§Ñ §ä§â§Ö§Ù§à§â§à§Þ §å §æ§à§â§Þ§Ñ§ä§å scheme://host:port |
| §±§â§Ö§æ§Ú§Ü§ã §ä§â§Ö§Ù§à§â§Ñ | §ß§Ö | /AIMWebService/api/Accounts? | §¯§Ñ§Ó§Ö§Õ§Ú§ä§Ö §á§â§Ú§Ý§Ñ§Ô§à?§Ö§ß§Ú §á§â§Ö§æ§Ú§Ü§ã §Ù§Ñ §á§å§ä§Ñ?§å §ä§â§Ö§Ù§à§â§Ñ §Ú§Ý§Ú §å§á§Ú§ä. §¡§Ü§à §ß§Ú?§Ö §ß§Ñ§Ó§Ö§Õ§Ö§ß§à, §Ü§à§â§Ú§ã§ä§Ú §ã§Ö §á§à§Õ§â§Ñ§Ù§å§Þ§Ö§Ó§Ñ§ß§Ñ §Ó§â§Ö§Õ§ß§à§ã§ä. |
| §³§ä§â§Ú§ß§Ô §ä§Ñ?§ß§à§Ô §å§á§Ú§ä§Ñ §ä§â§Ö§Ù§à§â§Ñ | §Õ§Ñ | §µ§á§Ú§ä §Ü§à?§Ú §ß§Ñ§Ó§à§Õ§Ú §à§Õ§Ñ§Ü§Ý§Ö §ä§â§Ö§Ò§Ñ §á§â§Ö§å§Ù§Ö§ä§Ú §Ñ§Ü§â§Ö§Õ§Ú§ä§Ú§Ó§Ö §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ. §±§â§Ú§Þ§Ö§â: AppID=foo&Query=Safe=bar;Object=buzz |
|
| §³§Ö§â§ä§Ú§æ§Ú§Ü§Ñ§ä§Ú §ä§â§Ö§Ù§à§â§Ñ | §ß§Ö | §¯§Ñ§Ü§à§ß §ê§ä§à §à§Ù§ß§Ñ§é§Ú§ä§Ö §á§à?§Ö §Ù§Ñ §á§à§ä§Ó§â§Õ§å, §á§à?§Ñ§Ó§Ú?§Ö §ã§Ö §Õ§à§Õ§Ñ§ä§ß§Ú §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ú §Ü§à?§Ú §à§Þ§à§Ô§å?§Ñ§Ó§Ñ?§å §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ?§Ö §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú?§Ö §Ü§Ý§Ú?§Ö§ß§ä§Ñ. §ª§Ñ§Ü§à ?§Ö §à§Ó§Ñ? §á§Ñ§â§Ñ§Þ§Ö§ä§Ñ§â §à§á§è§Ú§à§ß§Ú, §ä§à§á§Ý§à §ã§Ö §á§â§Ö§á§à§â§å§é§å?§Ö §Õ§Ñ §Ô§Ñ §à§Þ§à§Ô§å?§Ú§ä§Ö §Ù§Ñ §Ü§à§Þ§å§ß§Ú§Ü§Ñ§è§Ú?§å §ã§Ñ CyberArk §ä§â§Ö§Ù§à§â§à§Þ. | |
| §¥§Ñ§ä§à§ä§Ö§Ü§Ñ SSL §ã§Ö§â§ä§Ú§æ§Ú§Ü§Ñ§ä§Ñ | §ß§à | §è§à§ß§æ/§è§Ö§â§ä§ã/§è§Ú§Ò§Ö§â§Ñ§â§Ü-§è§Ö§â§ä.§á§Ö§Þ | §±§å§ä§Ñ?§Ñ §Õ§à §Õ§Ñ§ä§à§ä§Ö§Ü§Ö SSL §ã§Ö§â§ä§Ú§æ§Ú§Ü§Ñ§ä§Ñ. §¥§Ñ§ä§à§ä§Ö§Ü§Ñ §Þ§à§â§Ñ §Ò§Ú§ä§Ú §å PEM §æ§à§â§Þ§Ñ§ä§å.<§Ò§â>§¡§Ü§à §Õ§Ñ§ä§à§ä§Ö§Ü§Ñ §ã§Ö§â§ä§Ú§æ§Ú§Ü§Ñ§ä§Ñ §ä§Ñ§Ü§à?§Ö §ã§Ñ§Õ§â§Ø§Ú §á§â§Ú§Ó§Ñ§ä§ß§Ú §Ü?§å§é, §à§ã§ä§Ñ§Ó§Ú§ä§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§Ñ§â §Õ§Ñ§ä§à§ä§Ö§Ü§Ö SSL §Ü?§å§é§Ñ §á§â§Ñ§Ù§Ñ§ß. |
| §¥§Ñ§ä§à§ä§Ö§Ü§Ñ SSL §Ü?§å§é§Ñ | §ß§à | conf/certs/cyberark-cert.pem | §¯§Ñ§Ù§Ú§Ó §Õ§Ñ§ä§à§ä§Ö§Ü§Ö SSL §á§â§Ú§Ó§Ñ§ä§ß§à§Ô §Ü?§å§é§Ñ §Ü§à?§Ñ §ã§Ö §Ü§à§â§Ú§ã§ä§Ú §Ù§Ñ §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú?§å §Ü§Ý§Ú?§Ö§ß§ä§Ñ. §¥§Ñ§ä§à§ä§Ö§Ü§Ñ §Þ§à§â§Ñ §Ò§Ú§ä§Ú §å PEM §æ§à§â§Þ§Ñ§ä§å. |
§£§â§Ö§Õ§ß§à§ã§ä§Ú §Ü§à§â§Ú§ã§ß§Ú§é§Ü§à§Ô §Þ§Ñ§Ü§â§à§Ñ
§¥§Ñ §Ò§Ú§ã§ä§Ö §Ü§à§â§Ú§ã§ä§Ú§Ý§Ú CyberArk Vault §Ù§Ñ §é§å§Ó§Ñ?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §£§â§Ö§Õ§ß§à§ã§ä §ä§Ñ?§ß§Ö §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú§ç §Þ§Ñ§Ü§â§à§Ñ, §å§Ó§Ö§â§Ú§ä§Ö §ã§Ö §Õ§Ñ:
- Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â ?§Ö §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ§ß §Ù§Ñ §â§Ñ§Õ §ã§Ñ CyberArk Vault-§à§Þ;
- §á§Ñ§â§Ñ§Þ§Ö§ä§Ñ§â §±§â§à§Ó§Ñ?§Õ§Ö§â §ä§â§Ö§Ù§à§â§Ñ §å §¡§Õ§Þ§Ú§ß§Ú§ã§ä§â§Ñ§è§Ú?§Ñ ¡ú §°§á§ê§ä§Ö ¡ú §¥§â§å§Ô§à ?§Ö §á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "CyberArk Vault".
§³§Ñ§Þ§à Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â §Ù§Ñ§ç§ä§Ö§Ó§Ñ §á§â§Ú§ã§ä§å§á §£§â§Ö§Õ§ß§à§ã§ä §ä§Ñ?§ß§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú§Þ§Ñ §Þ§Ñ§Ü§â§à§Ñ §Ú§Ù §ä§â§Ö§Ù§à§â§Ñ. §°§ã§ä§Ñ§Ý§Ö Áú»¢¶Ä²© §Ü§à§Þ§á§à§ß§Ö§ß§ä§Ö (§á§â§à§Ü§ã§Ú, §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã) §ß§Ö §ä§â§Ö§Ò§Ñ?§å §ä§Ñ§Ü§Ñ§Ó §á§â§Ú§ã§ä§å§á.
§£§â§Ö§Õ§ß§à§ã§ä §Þ§Ñ§Ü§â§à§Ñ §ä§â§Ö§Ò§Ñ §Õ§Ñ §ã§Ñ§Õ§â§Ø§Ú §å§á§Ú§ä (§Ü§Ñ§à query:key).
§±§à§Ô§Ý§Ö§Õ§Ñ?§ä§Ö Vault secret macros §Ù§Ñ §Õ§Ö§ä§Ñ?§ß§Ö §Ú§ß§æ§à§â§Þ§Ñ§è§Ú?§Ö §à §à§Ò§â§Ñ§Õ§Ú §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Þ§Ñ§Ü§â§à§Ñ §à§Õ §ã§ä§â§Ñ§ß§Ö Áú»¢¶Ä²©-§Ñ.
§³§Ú§ß§ä§Ñ§Ü§ã§Ñ §å§á§Ú§ä§Ñ
§³§Ú§Þ§Ò§à§Ý §Õ§Ó§à§ä§Ñ§é§Ü§Ñ (":") ?§Ö §â§Ö§Ù§Ö§â§Ó§Ú§ã§Ñ§ß §Ù§Ñ §à§Õ§Ó§Ñ?§Ñ?§Ö §å§á§Ú§ä§Ñ §à§Õ §Ü?§å§é§Ñ.
§¡§Ü§à §ã§Ñ§Þ §å§á§Ú§ä §ã§Ñ§Õ§â§Ø§Ú §Ü§à§ã§å §è§â§ä§å §Ú§Ý§Ú §Õ§Ó§à§ä§Ñ§é§Ü§å, §à§Ó§Ú §ã§Ú§Þ§Ò§à§Ý§Ú §ä§â§Ö§Ò§Ñ §Õ§Ñ §Ò§å§Õ§å §Ü§à§Õ§Ú§â§Ñ§ß§Ú §å §µ§²§-§å ("/" ?§Ö §Ü§à§Õ§Ú§â§Ñ§ß§à §Ü§Ñ§à "%2F", ":" ?§Ö §Ü§à§Õ§Ú§â§Ñ§ß§à §Ü§Ñ§à "%3A").
§±§â§Ú§Þ§Ö§â
- §µ Áú»¢¶Ä²©-§å §Õ§à§Õ§Ñ?§ä§Ö §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Þ§Ñ§Ü§â§à {$PASSWORD} §ä§Ú§á§Ñ §£§â§Ö§Õ§ß§à§ã§ä §ä§Ñ?§ß§Ö §Ú §ã§Ñ §Ó§â§Ö§Õ§ß§à§ê?§å
AppID=zabbix_server&Query=Safe=passwordSafe;Object=zabbix:Content
- Áú»¢¶Ä²© ?§Ö §á§à§ã§Ý§Ñ§ä§Ú §ã§Ý§Ö§Õ§Ö?§Ú API §Ù§Ñ§ç§ä§Ö§Ó §å §ä§â§Ö§Ù§à§â:
curl \
--header "Content type: application/json" \
--cert cert.pem \
--key key.pem \
https://127.0.0.1:1858/AIMWebService/api/Accounts?AppID=zabbix_server&Query=Safe=passwordSafe;Object=zabbix_server_database- §°§Õ§Ô§à§Ó§à§â §ä§â§Ö§Ù§à§â§Ñ ?§Ö §ã§Ñ§Õ§â§Ø§Ñ§ä§Ú §Ü?§å§é "§³§Ñ§Õ§â§Ø§Ñ?":
{
"Content": <password>,
"UserName": <username>,
"Address": <address>,
"Database" :<Database>,
"PasswordChangeInProcess":<PasswordChangeInProcess>
}- §¬§Ñ§à §â§Ö§Ù§å§Ý§ä§Ñ§ä §ä§à§Ô§Ñ, Áú»¢¶Ä²© ?§Ö §â§Ñ§Ù§â§Ö§ê§Ú§ä§Ú §Þ§Ñ§Ü§â§à {$PASSWORD} §ß§Ñ §Ó§â§Ö§Õ§ß§à§ã§ä - <password>
§¡§Ø§å§â§Ú§â§Ñ?§ä§Ö §á§à§ã§ä§à?§Ö?§å §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú?§å
§¥§Ñ §Ò§Ú§ã§ä§Ö §Ñ§Ø§å§â§Ú§â§Ñ§Ý§Ú §á§à§ã§ä§à?§Ö?§å §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú?§å §Ù§Ñ §á§â§Ö§å§Ù§Ú§Þ§Ñ?§Ö §ä§Ñ?§ß§Ú §Ú§Ù CyberArk §ä§â§Ö§Ù§à§â§Ñ:
§¡§Ø§å§â§Ú§â§Ñ?§ä§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§à§ß§Ö §Õ§Ñ§ä§à§ä§Ö§Ü§Ö Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â§Ñ §Ú§Ý§Ú §á§â§à§Ü§ã§Ú?§Ñ §Ü§Ñ§à §ê§ä§à ?§Ö §à§á§Ú§ã§Ñ§ß§à §å §à§Õ§Ö?§Ü§å §Ñ§Ü§â§Ö§Õ§Ú§ä§Ú§Ó§Ú §Ò§Ñ§Ù§Ö §á§à§Õ§Ñ§ä§Ñ§Ü§Ñ.
§¡§Ø§å§â§Ú§â§Ñ?§ä§Ö §á§à§ã§ä§Ñ§Ó§Ü§Ö DB §Ó§Ö§Ù§Ö §ä§Ñ§Ü§à §ê§ä§à ?§Ö§ä§Ö §á§à§ß§à§Ó§à §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ§ä§Ú Áú»¢¶Ä²© §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã §Ú §ß§Ñ§Ó§Ö§ã§ä§Ú §á§à§ä§â§Ö§Ò§ß§Ö §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ö §Ü§Ñ§à §ê§ä§à ?§Ö §à§á§Ú§ã§Ñ§ß§à §å §à§Õ§Ö?§Ü§å §¬§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã. §¥§Ñ §Ò§Ú§ã§ä§Ö §á§à§ß§à§Ó§à §Ü§à§ß§æ§Ú§Ô§å§â§Ú§ã§Ñ§Ý§Ú Áú»¢¶Ä²© §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ú §Ú§ß§ä§Ö§â§æ§Ö?§ã, §à§ä§Ó§à§â§Ú§ä§Ö URL §Ù§Ñ §á§à§Õ§Ö§ê§Ñ§Ó§Ñ?§Ö §Ü§à§â§Ú§ã§ß§Ú§é§Ü§à§Ô §Ú§ß§ä§Ö§â§æ§Ö?§ã§Ñ §å §á§â§Ö§Ô§Ý§Ö§Õ§Ñ§é§å:
- §Ù§Ñ Apache: http://<server_ip_or_name>/zabbix/setup.php
- §Ù§Ñ Nginx: http://<server_ip_or_name>/setup.php
§¡§Ý§ä§Ö§â§ß§Ñ§ä§Ú§Ó§ß§à, §à§Ó§Ú §á§Ñ§â§Ñ§Þ§Ö§ä§â§Ú §ã§Ö §Þ§à§Ô§å §á§à§Õ§Ö§ã§Ú§ä§Ú §å §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§à§ß§à? §Õ§Ñ§ä§à§ä§Ö§è§Ú §Ü§à§â§Ú§ã§ß§Ú§é§Ü§à§Ô §Ú§ß§ä§Ö§â§æ§Ö?§ã§Ñ(zabbix.conf.php):
$DB['VAULT'] = 'CyberArk';
$DB['VAULT_URL'] = 'https://127.0.0.1:1858';
$DB['VAULT_DB_PATH'] = 'AppID=foo&Query=Safe=bar;Object=buzz';
$DB['VAULT_TOKEN'] = '';
$DB['VAULT_CERT_FILE'] = 'conf/certs/cyberark-cert.pem';
$DB['VAULT_KEY_FILE'] = 'conf/certs/cyberark-key.pem';
$DB['VAULT_PREFIX'] = '';- §¬§à§ß§æ§Ú§Ô§å§â§Ú§ê§Ú§ä§Ö §Ü§à§â§Ú§ã§ß§Ú§é§Ü§Ö §Þ§Ñ§Ü§â§à§Ö §Ü§Ñ§à §ê§ä§à ?§Ö §à§á§Ú§ã§Ñ§ß§à §å §à§Õ§Ö?§Ü§å §£§â§Ö§Õ§ß§à§ã§ä§Ú §Þ§Ñ§Ü§â§à§Ñ §Ü§à§â§Ú§ã§ß§Ú§Ü§Ñ, §Ñ§Ü§à ?§Ö §á§à§ä§â§Ö§Ò§ß§à.
§¥§Ñ §Ò§Ú§ã§ä§Ö §Ñ§Ø§å§â§Ú§â§Ñ§Ý§Ú §á§à§ã§ä§à?§Ö?§å §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú?§å §Ù§Ñ §á§â§Ö§å§Ù§Ú§Þ§Ñ?§Ö §ä§Ñ?§ß§Ú §Ú§Ù HashiCorp §ä§â§Ö§Ù§à§â§Ñ, §á§à§Ô§Ý§Ö§Õ§Ñ?§ä§Ö HashiCorp §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú?§Ñ.