Accessing an SSH Relay Session

After making appropriate SSH relay configuration, you can access the SSH relay session in the following ways:

Accessing an SSH Relay Session from My access console

Start an SSH client by selecting the policy for the SSH relay session on My Access page. A JAVA Webstart program will then launch the downloaded JNLP file, which will then launch the JAVA UI.

  1. Click on home icon on the new Administration console.

  2. Specify the username and password to log in to Privileged Account Manager and click Login.

  3. Click Home > My Access > Predefined Tags > SSH/Telnet and click the launch icon before the appropriate resource name.

  4. You can administer the SSH Relay session as it opens in Home > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.

NOTE:

  • In Chrome browser, you have to open the downloaded JNLP file to launch the JAVA UI.

  • In Mozilla Firefox and Internet Explorer, the JNLP file opens automatically and launches the JAVA UI.

  • In Edge browser, you must modify the default program for launching the JNLP file to javaws.exe.

After the UI launches, the user must provide the credentials of the SSH Relay user to start the session.

Accessing an SSH Relay Session from SSH Client

  1. You can initialize an SSH relay session by using the following command:

    ssh -t -p2222 <PUMframeworkuser@sshrelayhost> <root@hostname>

    To initialize an SSH relay session with X11 forwarding, use the following command:

    ssh -X -t -p2222 <PUMframeworkuser@sshrelayhost> <root@hostname>

  2. A list of all the available SSH sessions are displayed. Enter the appropriate option to start the respective SSH relay session and provide the credentials of the SSH Relay user.

    NOTE:When you exit from the current SSH Relay session, all the available SSH Relay sessions are displayed again enabling you to connect to a different target system.