Hello everyone,
we're facing an issue where checked-out accounts are not automatically checked back in.
In the screenshot, you can see that the account was checked out yesterday morning for 420 minutes (i.e., 7 hours).
Most colleagues simply close their laptops and leave without properly ending their sessions.
How can I ensure that the account is automatically checked in after 7 hours and the password is rotated accordingly?
de1f6daa-ab25-4e82-b400-40229e4f7a91.png
Hello Alex,
Thank you for reaching out to our forum.
When a PAM account is checked out, a green arrow appears next to it in the Devolutions Server web UI to indicate the checked-out status. You can also use the PAM reports feature to track related activity refer to the documentation here: PAM reports in Devolutions Server - Devolutions Documentation.
Regarding the issue of accounts not being checked in on time, we are still investigating this behavior and do not yet have a clear root cause. However, it appears to be linked to the Scheduler service restarting it often results in all overdue check-ins being processed at once.
Could you also let us know which Devolutions Server version you are currently using? That will help us narrow down the issue.
Best regards,
Michel Audi
Hi,
we are using 2025.1.7.0
We can confirm this, after a restart of the Scheduler Service, overdue entries disappear immediately.
I do not see any errors in the logs that indicate that the password change failed.
If we can support you with further logs, please let us know.
Hi,
Thank you for your feedback. We’ve received an update from our QA team they were able to reproduce the issue during their investigation. The matter has now been escalated to our development team, who will work on a fix.
In the meantime, I recommend setting up a scheduled task to restart the scheduler service daily during your downtime to avoid impacting any users currently using these accounts.
We’ll keep you updated on the release.
Best regards,
Michel Audi