3.2 Linux, UNIX, Mainframes, and Network Devices

You can access resources such as, UNIX or Linux machines, Mainframes, or network devices in the following ways based on the policies defined by administrator:

3.2.1 Using SSH Relay

SSH Relay allows you to access the target computer through Privileged Access Manager proxy where the Privileged Access Manager does a single sign on as a privileged user. You can launch the SSH relay sessions in the following ways:

Launch from User Console

To launch an SSH or a Telnet session

You can launch the SSH session by clicking either of the following:

  • Resource: Allows you to add session notes before launching the session.

  • The icon:Allows you to access the Web SSH session.

    You can exchange files between the local drive and Web SSH session. The administrator has the privilege to enable the File Transfer capability.

Launch Using SSH Client

To launch the SSH Relay session using SSH client:

  1. Open the SSH client.

  2. (conditional) If you know the target hostname and the target user as whom you want to access the computer, use the following command:

    To initialize an SSH session:

    ssh -t -p 2222 <PAMuser@PAMsshrelayhost> <targetuser@targethostname>

    To initialize an SSH relay session with X11 forwarding, use the command:

    ssh -X -t -p 2222 <PAMuser@PAMsshrelayhost> <targetuser@targethostname>

  3. (Conditional) If you do not know the target host name, perform the following:

    1. To initialize an SSH session, use the command and provide your user console credentials:

      ssh -t -p 2222 <PAMuser@PAMsshrelayhost>

      To initialize an SSH relay session with X11 forwarding, use the command:

      ssh -X -t -p 2222 <PAMuser@PAMsshrelayhost>

      A list of all the available SSH sessions are displayed.

    2. Enter the appropriate option to start the respective SSH session.

      NOTE:When you exit from the SSH session, all the available SSH Relay sessions are displayed again that enables you to connect to a different target system.