Hello,
I'm having problems getting RDM to work with Secret Server. The credential list is empty however I am able to see my secret information fine when manually browsing to Thycotic Secret Server. Web services are enabled and I can browse to the URL without any issues. I haven't changed any default options within the credential entry, only adding our specific web service URL. I upgraded to from 11.5 to 11.6 but still the same result. Any ideas?
Thanks
Dale
Hello,
Do you have something relevant in Help -> View Application Log?
Best regards,
Jeff Dagenais
Hello,
Also, what type of authentication are you using? Web or Windows?
The URLs that we have provided in the drop down are only samples, have you adapted the URL to point to the proper address?
Best regards,
Maurice
Hello,
Nothing recorded in the application log. Its Windows Authentication as I am able to browse to the web service as my logged in user. This is the link I am using (with server removed):-
https://"MyServer"/SecretServer/winauthwebservices/sswinauthwebservice.asmx
Thanks
Dale
Hello,
Best regards,
Maurice
Its Thycotic Secret Server 8.9 Enterprise Plus Edition.
Any ideas?
Hello,
Our test environment is not configured to use Windows authentication and we are working with our IT guy to set this up. We should be able to complete this today. We will get back to you with results as soon a possible.
Best regards,
Jeff Dagenais
Great, thanks for the update.
Hello,
Our test environment is now up and running and Secret Server Windows authentication has been configured as well.
That being said, I was able to see the credentials from Secret Server inside RDM with Windows authentication.
If you open Internet Explorer and paste the link that you have in RDM (http://LocalHost/SecretServer/winauthwebservices/SSWinAuthWebService.asmx), do you see something like this?
You can also try to access the Secret Server dashboard (http://LocalHost/SecretServer) from that same computer. Does the Secret Server dashboard appear?
Best regards,
Jeff Dagenais
2016-09-08_15-49-05.jpg
Hello
Yes I get the same screen for the first link. For the second I am presented with a login screen. See attachments.
Thanks
Dale
SS2.PNG
SS1.PNG
Hello,
Strange that you are seeing a login screen when you try to access http://localhost/SecretServer because with Windows Authentication, you should access the Secret Server portal directly.
Have you tried to access http://localhost/SecretServer with Internet Explorer?
Are you connected on your computer with the same domain\username that you are using to access Secret Server usually?
Best regards,
Jeff Dagenais
Hello,
Yes I am using the same domain\user I use for Secret Server and RDM. Is there any debugging that could be switched on to diagnose further? Nothing is logged in the Application Log.
Thanks
Dale
Hello,
There's no debbuging that can be enabled.
Could you post a small video demonstrating how do you access Secret Server from your computer.
I want to see if it can be something related to Secret Server.
Best regards,
Jeff Dagenais
Hi Jean,
It could be Secret Server related however when going through the issue with our support team they thought it was on the RDM side (piggy in the middle).
Could I send you a WebEx invitation for Wednesday to show you? It would be easier than creating a video and having to edit it to remove any confidential information before posting publicly.
Thanks
Dale
Hello,
Just to reiterate, by simply opening the dashboard with Internet Explorer, you should be given access and see the secrets in that screen without authenticating.
I do not understand why you are using "the same domain\user"
Is this a new setup?
Maurice
Hello,
When launching the dashboard within IE I have to enter my Smartcard pin for the account I am currently logged in as, then I am able to see a list of my secrets. When browsing to the web service URL I am not prompted for any login.
Thanks
Dale
Hello,
Oh, I didn't know that you we're using 2FA with your Secret Server.
2FA with Secret Server is not supported in RDM yet.
Our engineering department is currently in contact with Tycothic to implement this feature. However, I cannot provide you an ETA for the delivery of that feature.
Best regards,
Jeff Dagenais
Hello,
Sorry, I somehow forgot to mention that. This will be very useful for us once implemented. Thanks for the assistance.
Regards
Dale