11 April,19 at 11:50 AM
There is a script that will check for the status of each Centrify Connector and eventually write an event to the Windows Event Log, Send an e-mail and restart the service. You can find the script here: https://github.com/israelbiscaia/centrify-cc-monitor
In order to use it you need to:
1. Create a Service User that has no Rules set for authentication (as shown below), also, ensure the User has “Read-Only Administrator Right”:
2. Change the top section of the .ps1 file to match your tenant's information, for example:
[string]$server = "my-company.my.centrify.com/", #Centrify pod URL [string]$username = "admin@cenrifytenant.com", #Tenant reporting-capable username. This user must be a member of a role that is allowed password-only authentication. [string]$password = "Centrify!", #Tenant admin password
3. Optionally change the event ID, type and message to be written to the Event Log:
$eventId = "1010", #Event ID to be written to the Event Log in case the Centrify Cloud Connector service is down $eventType = "Warning", #Event type to be written to the Event Log in case the Centrify Cloud Connector service is down $eventMessageCCOffline = "Centrify Cloud Connector is Inactive", #Event type to be written to the Event Log in case the Centrify Cloud Connector service is inactive $eventMessageServiceStopped = "Centrify Cloud Connector is being stopped", #Event type to be written to the Event Log in case the Centrify Cloud Connector service is down $eventMessageServiceStarted = "Centrify Cloud Connector is being started", #Event type to be written to the Event Log in case the Centrify Cloud Connector service is inactive
4. Copy the .ps1 script to each of your Centrify Connectors;
5. Test the Powershell script in a Connector that is marked as Inactive:
6. This will write events to the Event Log:
7. Set up a Scheduled Task to run every X minutes. Make sure to have the task to Run with highest privileges: