Hi,
Is there a way to change the database user which bigfix server is using?
We are migrating from old domain to new domain. We have created a new user and we would like to provide this user information to bigfix server so that it will be able to access the database.
Regards,
Dilu
Is your database DB2 or SQL Server ?
We use a Domain account to limit access to our BigFix SQL databases. To make it work, we configure the BigFix Server Service to login as the Domain Account. I believe FillDB also needs to use the same credentials.
The undesired side effect is that BigFix now thinks we have a Remote Database and all of our upgrades are Manual Upgrades. Not really a big deal.
This is all from memory as I cannot access the server right now to verify which services needed to be configured with the AD account.
Following that approach, I think the user should be granted with permissions over few directories in case the user is not an admin user.
Hi Tim,
Currently bigfix server services are running as local system user. And we have used a domain user when we installed bigfix server and I assume bigfix is taking that domain user to access MS SQL database on the same server. And that domain user is the DB owner of BESEnterprise and BESReporting.
So just modifying the Bigfix services user will be enough?
Regards,
Dilu S
It sounds like the Local System account is what is accessing your databases currently. That is the default configuration.
You can configure the Security on the databases to allow the Domain Account to access the databases. Once you have done that, you wI’ll need to configure your Domain Account to be able to Log On As a Service, then configure the services to use that credential.
In short, BigFix accesses the database with the credentials that it’s services are running under. If they are using Local System, that is what they access the database as. Not all of the services need to use the Domain Credentials.
There is a blog posting (https://bigfix.me/blog/post/2013/3/15/configuring-iem-to-run-as-a-domain-service-account) at BigFix.me that discusses this process.
One item I disagree with, please do not make your Service Account a Local Administrator! Set the Folder Access rights needed for the application.
Setting the Service Account to be a Local Administrator is a very bad practice!
Thank you Tim.
This made my understanding on bigfx server and how it access database clear.