IsaacM

Thanks!

As a stop-gap until the ability to store SSL certificates is ready I would like to use the icon from the Certificate object type

on a document object. I figured I'd select the icon from the list of supplied images in RDM but the certificate icon isn't listed.

How can I go about using the icon from the certificate object type on another object type?

Thanks

Do you have any idea as to when we might see this feature released? Is it something that's going to take years or are we talking the next few months?

Thanks

I've opened a feature request to have the certificate entry type decode and auto-populate the subject, validity period, issues, etc. You can find the feature request here.

The certificate entry type is merely the document entry type with a requirement to fill in an expiration date. 😞 The entry type would be allot more useful if it decoded the certificate information. A simple text box where the user could paste in a PEM encoded certificate and private key would suffice. Sort of like what's being done now with SSH certificates.

For bonus points allow the user to export the certificate in their chosen format. PFX, PEM, DER etc

Decoding the certificate information would provide all the pertinent certificate details automatically such as:

Subject

Issuer

Validity period (expiration date)

Serial number

and much more...

Here's an example certificate in PEM format. You can decode this certificate at any number of places to see what information is provided:

https://www.sslchecker.com/certdecoder

http://phpseclib.sourceforge.net/x509/decoder.php

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Is there a difference between the Document entry type and the Certificate entry type aside from the icon shown for the entry? Also the certificate entry type requires an expiration date to be entered but aside from that they appear to be the same thing.

Thanks

Please provide a description field to the template list or some way of identifying what's been changed from the default for a template. Descriptively naming my templates based on what's been changed from the default isn't practical.

Template names such as this aren't practical:

SSH with terminal scroll back set to 2000 - Internet Protocol set to 6 - Tags PDX production - before close issue command exit

What is the difference between the Session tool and Application tool add-ons?

For example I see the SQL Server Management Studio has both an application tool add-on as well as a session tool add-on.

Thanks

Could you try RDM 2020.2.15.0?

I see the confluence tab now on folders in 2020.2.15.0. However, clicking on the tab displays a white page with nothing on it. The same thing happens when I click on the confluence tab for other objects that worked previously.

What RDM version do you use? I know that they made a fix for that recently.

I'm using version 2020.2.12.0

By configuring the url, you will get a tab called Confluence in the dashboard

When I populate the Confluence URL on a device I do see the confluence tab. When populating the confluence url on a folder object there is no Confluence tab. Is this by design?

Why not start simple, make it a option to replace the documentation tab with a preexisting Confluence page for each entry?

I see there is now a field for Confluence documentation URL under User Interface in the properties of a folder. I've populated the URL with a confluence page that I'd like to use in place of the RDM documentation module. Clicking on the documentation tab still shows the default RDM documentation though.

How is the feature supposed to work?

Thanks

Hello,

What is the difference between the "HP Integrated Lights Out (iLO Web)"session type and the "web browser" session type? If I create a web browser session type and configure it with the URL of the iLO card it looks and acts the same as if I've created it with the ilo session type. What's the advantage of using the HP iLO session type? Does it do anything aside from simply displaying the iLO web interface?

Also, when launching an iLO session type it doesn't automat6ically login even though credentials are configured for the session.

Thanks

Thanks

What is the difference between the "Website" and "Web Browser" session types? I couldn't find anything in the manual regarding these session types.

The error I get is:

Something isn't adding up. If I connect the ssh tunnel session manually I get this:

That tells me that a socks proxy has been setup to listen on 127.0.0.1 on port 41813. If I configure Firefox to use that socks proxy listening on 127.0.0.1 port 41813 it works. I'm able to browse the internet via that SSH tunnel in Firefox. This tells me that the ssh-tunnel is up and that the socks proxy is working as expected.

Now if I click on an SSH-connection connection that is configured to use that ssh-tunnel another ssh-tunnel session is opened. Why would RDM open another socks proxy on 127.0.0.1 when it already has one open?

Are you saying that you're able to connect to an SSH session using that ssh-tunnel connection you have setup and working? The screenshot only shows that your ssh-tunnel session is opened. Can you actually connect to an SSH session through said tunnel?

Thanks

Sorry for the late reply, I was out of town. I've followed your instructions but still can't get it working.

• What is the difference internally between the method you're suggesting and specifying an SSH Gateway (Jump Host) for each individual connection? Specifying a SSH Gateway (Jump Host) seems work okay although the administrative overhead of using that method doesn't make it practical.

• Why isn't there an option to specify a predefined ssh jump host on the aptly named tab "SSH Gateway (Jump Host)"?

The error I get is:

Here's my config:

SSH Tunnel Connection:

The ssh session that is configured to connect through the ssh tunnel:

The VPN/SSH/Gateway tab of the ssh-connection:

The settings tab of the ssh session

Thanks for all your help on this.

Thanks for the reply. Please correct me if I am wrong but specifying a session in VPN/SSH/Gateway ---> settings tab as mentioned in your previous message makes RDM auto-start the specified SSH tunnel prior to starting the session. That's it. It doesn't mean "Route this session through the specified SSH tunnel." It's a shortcut to auto-connect the tunnel. Nothing more nothing less.

I think there is some confusion in regards to what I'm asking about. Assuming I have 30 servers behind a firewall and want to connect to said servers via an "ssh jump host/SSH tunnel" I would have to create 60 total entries using the instructions provided in that blog post.

30SSH-tunnel connections. One for each server

30 SSH connections pointed at 127.0.0.1

I have a hard time believing that this is the only method available to connect hosts via an SSH tunnel. If this is indeed how things work in RDM then there has been a gross oversight to say the least which I'd like to believe isn't the case.

Ideally I'd create ONE ssh tunnel entry with a type of dynamic or something and point all connections to use the SOCKS proxy created by that SSH tunnel. An added benefit of doing it this way is that my ssh server entries don't have to be pointed to an artificial IP address such as 127.0.0.1.

If you're unsure of what I'm trying to do please see: https://blog.royalapplications.com/2015/04/21/new-feature-secure-gateway-ssh-tunnels/

Thanks for your help on this.

I was under the mistaken impression "jump host" and "SSH Tunnel" were synonymous. You are correct, I'm referring to an SSH tunnel. The blog article provides instructions on how to tunnel to a remote host using the local port forwarding method. This method works well if you only need to tunnel traffic to single host. If you need to tunnel traffic to multiple hosts then this method quickly becomes an administrative nightmare.

I'm looking for a feature like this in RDM: https://blog.royalapplications.com/2015/04/21/new-feature-secure-gateway-ssh-tunnels/

I'd like to create one SSH tunnel object and then reference that object for any connection that can be reached via that particular SSH tunnel. Is something like this possible? I assume I'd have to use the dynamic ssh tunnel option somehow.

Is there a way to create a SSH "jump host" and then assign it to SSH connections that require a jump host? I find it odd that you're required to specify the jump host IP address, login and password for each and every connection that requires a jump host. What am I missing?

Thanks