Keepass: Inherited Credentials not woking as expected

Keepass: Inherited Credentials not woking as expected

avatar

Hello all,

I use RDM and Keepass.
To reduce the amount of credentials, I created a Keepass credential entry which should use the "Name Filtering Method".
The variable $GROUP$ works very good, because it display the session's whole path.




Afterwards I created a customer A-Customer, a subgroug A-Group and a connection a-server.
On the customer level I set the Keepass credentials.
A-Group and A-Server are confugured to inherit the credentials.


With that setup I should be able to create a customer B and reuse the Keepass credentials.
In Keepass there would be a customer B Folder with other username/password. I would have only one place to manage my credentials.
(I want to use Keepass here, because Keepass has some plugins to use the crendials also within other software (e.g Firefox).)


I checked the variable inherence using the parrot.bat from the help.
Running the parrot.bat as an entry unter A-Group, the output is: A-Customer\A-Group
Runing under costumer A, the output is: A-Customer

Using this output, I created a structure in Keepass.



The issue is, that RDM does not find the correct credentials for a-server. It displays a list of crentials starting with "A-Customer".

RDM uses here only the first level (the customer), not the secound level (folder). Allthough the variable is correctly resolved.

Setting the credentials of A-Group to "Keepas (Group)" works.
But this is not what I was expecting.

Is this a bug?
Or is there an other variable which could work?

I'm using:

RDM 11.0.8
Keepass 2.3

Kind regards,
Karl

All Comments (5)

avatar

Hello Karl,
I have assigned this to our QA to reproduce it. After that I will be able to verify if we can do anything for that.

Regards

David Hervieux

avatar

Hi David,

thank you for you fast reply.
I will be waiting.

Have a nice weekend,
Karl

avatar

Hello Karl,

I've managed to reproduce your issue and it should be fixed in the next release. The problem seems to be caused by the session's credential inheritance.

Best regards,

Jean-Philippe Charest

avatar

Hello Jean-Philippe,

and again a fast replay.
Thank you.I'll be waiting.

Kind Regards,
Karl Schulz

avatar

Hello,

We tried to integrate this but unfortunately, there are a few restrictions with our architecture that makes this impossible to do at the moment. Inheriting the credentials means that the variables are resolved by the one which has the credentials, not the ones inheriting from it. As a workaround you could set each connection's credentials to the entry directly. You can do this quickly by selecting the entries > Right click > Edit > Batch Edit > Change Saved Credentials, and select your keepass entry.

Sorry for the inconvenient.

Regards,

Hubert Mireault

Ends in 10 days