Adding Database Connectors Using Command Control

You can add the database connectors for any required agent which has the dbaudit module to connect to the supported database. You can add any number of database connectors to an agent listed on the Database Connectors page.

Adding Database Connector for Oracle

  1. On the home page of the console, click Hosts.

  2. In the left pane, click Database Connectors.

    The Database Connectors page displays all the agents that have dbaudit package installed with the list of connectors.

  3. Click Add on the bar for the required agent.

    If you have already added a connector, you can modify it as required by clicking the required connector field.

  4. Specify the following:

    • Type: Select Oracle from the drop-down menu.

    • DB Proxy Port: Specify the port on which the Privileged Access Manager accepts the connection from database clients to connect to a specific database server. Privileged Access Manager maps this port number to a specific database that has a specific DB address and DB Port.

    • DB Server Address: Specify the IP address or host name of the Oracle database.

    • DB Server Port: Specify the port number of the Oracle database.

    • Connection Protocol: Select TCP for non-SSL connection or TCPS for an SSL connection.

    • DB SSL Version: Specify the SSL version used on the Oracle database server.

    NOTE:

    • To use SSL, import the Privileged Access Manager certificate to the database client’s wallet.

    • If you are using Oracle 11.x or earlier versions of Oracle for an SSL connection, Privileged Access Manager supports only the TLS1V0 SSL version.

    • If you are using Oracle 12.x, Privileged Access Manager supports the TLS1V0, TLS1V1 and TLS1V2 versions.

  5. Click Save.

    When you save the configuration, the agents containing the dbaudit package restarts.

Adding Database Connector for Microsoft SQL Server

For Microsoft SQL Server database you can add a Microsoft SQL Server database connector using the port number or using the Microsoft SQL Server instance.

Adding Database Connector Using Port Number

  1. On the home page of the console, click Hosts.

  2. In the left pane, click Database Connectors.

    The Database Connectors page displays all the agents that have dbaudit package installed with the list of connectors.

  3. Click Add on the bar for the required agent.

    If you have already added a connector, you can modify it as per requirement by clicking the required connector field.

  4. Specify the following:

    • Type: Select Microsoft SQL Sever from the dropdown menu.

    • Use with Instance: The Use with Instance checkbox is selected by default. Uncheck this to configure the connector with the database port number.

    • DB Proxy Port: Specify the port number on which the Privileged Access Manager accepts the connection from database clients to connect to a specific database server. Privileged Access Manager maps this port number to a specific database that has a specific DB address and DB Port.

    • DB Server Address: Specify the IP address or host name of the Microsoft SQL server.

    • DB Server Port: Specify the port number of the Microsoft SQL server.

    • Network Packet Size: The default value is 4096. You can enter any value within the range 512 to 16000.

      NOTE:You need to enter the same value as specified here in the client, while connecting through this connector.

Adding Microsoft SQL Server Connector Using Named Instance

  1. (Optional) If you know the Microsoft SQL Server instance name, perform the following:

    1. On the home page of the console, click Hosts.

    2. In the left pane, click Database Connectors.

      The Database Connectors page displays all the agents that have dbaudit package installed with the list of connectors.

    3. Click Add for the required agent.

    4. Specify the following:

      • Type: Select Microsoft SQL Sever from the dropdown menu.

      • Use with Instance: The Use with Instance checkbox is selected by default.

      • DB Proxy Port: Specify the port number on which the Privileged Access Manager accepts the connection from database clients to connect to a specific database server. Privileged Access Manager maps this port number to a specific database that has a specific DB address and DB Port.

      • DB Server Address: Specify the IP address or host name of the Microsoft SQL server.

      • Instance Name: Enter the Database Instance name and click Fetch Details.

        NOTE:The SQL Server Browser service should be enabled in the SQL Server for which the instances are being fetched.

      • DB Server Port: Specify the port number of the Microsoft SQL server.

      • Dynamic Port: Click the Dynamic Port checkbox if a dynamic port is set for the configured server.

      • Network Packet Size: The default value is 4096. You can enter any value within the range 512 to 16000.

        NOTE:You need to enter the same value as specified here in the client, while connecting through this connector.

  2. (Optional) If you do not know the Microsoft SQL Server instance name, you can search and fetch the instance as follows:

    1. On the home page of the console, click Hosts.

    2. In the left pane, click Database Connectors.

      The Database Connectors page displays all the agents that have dbaudit package installed with the list of connectors.

    3. Click Microsoft SQL Server Instances.The Microsoft SQL Server Instances window is displayed.

    4. Enter the host name or the IP for which you want to fetch the instances and click Fetch.

      NOTE:The SQL Server Browser service should be enabled in the SQL Server for which the instances are being fetched.

    5. Select the desired instance and click Ok.

      NOTE:Click the Dynamic Port checkbox if a dynamic port is set for the configured server.

    6. Click Save.

Adding Database Connector for Other Databases

Perform the following for adding the connectors for the databases MySQL, PostgreSQL, MariaDB, Sybase, and IBM Db2:

  1. On the home page of the console, click Hosts.

  2. In the left pane, click Database Connectors.

    The Database Connectors page displays all the agents that have dbaudit package installed with the list of connectors.

  3. Click Add on the bar for the required agent.

    If you have already added a connector, you can modify it as required by clicking the required connector field.

  4. Specify the following:

    • Type: Select the desired database from the drop-down menu.

    • DB Proxy Port: Specify the port number on which the Privileged Access Manager accepts the connection from database clients to connect to a specific database server. Privileged Access Manager maps this port number to a specific database that has a specific DB address and DB Port.

    • DB Server Address: Specify the IP address or host name of the database.

    • DB Server Port: Specify the port number of the database.

    • Connection Protocol: Select TCP for non-SSL connection and TLS for an SSL connection.

      This option is visible only for the databases for which you can choose the connection methods.

      Databases

      Connection Protocols

      Sybase

      You can choose TCP or TLS (SSL Connection) connection protocol.

      MySQL and MariaDB

      Privileged Access Manager dynamically selects the protocol based on the database client and database server configuration.

      PostgreSQL

      Privileged Access Manager supports only TCP protocol in this release.

      IBM Db2

      Privileged Access Manager supports only TCP protocol in this release.

    • Enable SHA Cipher Suites: This option allows Privileged Access Manager to use SHA cipher suites lower than SHA256 for communicating with database client and server.

      By default, this option is enabled because most of the third party database clients use SHA cipher suites for SSL communication.

  5. Click OK.

    When you save the configuration, the agents containing the dbaudit package restarts for the connector configurations to take effect.