Bounce host and mixed Credential: supplied username template , and password from KeePass

Bounce host and mixed Credential: supplied username template , and password from KeePass

avatar

Hi,

For a subset of our servers the login looks like this:

ssh myusername@fireid@desiredhost@bouncehost

So we go through bouncehost to get to desiredhost, logged as fireid user.
We provide the personal password for myusername for authentication.
As you see, the login name for bouncehost is myusername@fireid@desiredhost , which is parsed by bouncehost.

I'm trying to figure out how I could register those sessions in RDM.

I can make one session per target host with a constant host (bounce host) and variable username (three fields).
But the password is in KeePass and I can't use both KeePass and custom login username.

Moreover the session definition needs to be shared by the team, so I'd rather not set a username with a specific myusername value.

What would work for us:

1)
RDM get the KeePass credential: myusername and password.
RDM applies a template to set the effective username to myusername@fireid@sessionname , and keeps the KeePass password and session hostname unchanged.

OR

2)
RDM ask credentials to KeePass, with the session name as parameter
Somehow (I don't know if it's doable) KeePass computes the username string: myusername@fireid@sessionname, which is sent to RDM along with the password.

OR maybe something else.

Do you have any suggestion?

All Comments (1)

avatar

Hello DGM,
For now I don't have a solution in RDM. I don't know how we could do something like that. How do you setup your bounce? Is a special server type? I have to admit that I've never seen an environment like that.

David Hervieux