Kilian

Is this feature still being worked on ?

This would help us immensely.

Best regards,

Kilian

I do not know if this is an RDM issue.

I have updated the script in my Gitlab to add variables to set the timeout between elements appering and the script filling them out.

There is now also a variable to set timeout between the input beeing filled and the continue-button being pressed.

Maybe it helps!

Would you be able to DM me the username that you are trying to login to?

I would love to check out the HTML-IDs of the password-screen.

Hi Camron,

Does it not autofill at all or does it autofill but with the wrong information ?

Also, what did you use as the website URL ? Mine is: https://login.microsoftonline.com

The script works by waiting for the elements with the correct HTML-IDs and then fills them when they appear.

I have heard that the IDs might be diffrent if you login via a diffrent URL.

Then the script would just sit there and wait for the elements that will never come and it would look like the autofill is not working.

Regards,

Kilian

I think what would be good is to have many objects as JSON.

Something like this:

[
    {
        "entry_id": "4a55f5bf-e1b6-46e4-8145-5ff914c4e749",
        "open_time": "02.08.2024 14:30",
        "close_time": "02.08.2024 14:33",
        "comment": "Fixed by tuning off and on again.",
        "user": "Kilian"
    },
    {
        "entry_id": "5896262d-676f-4d8c-9f9b-e1a95c9eccfc",
        "open_time": "02.08.2024 15:12",
        "close_time": "02.08.2024 15:22",
        "comment": "Made config-backup from router.",
        "user": "Kilian",
    }
]

Best regards,

Kilian

Hi François,

we already have a system in place that synchronises the remote connections from diffrent sources (Teamviewer, Anydesk, etc.) into our ticketsystem so that we can see them on a timeline and create tickets that will get billed to the customer. Those already existing systems we can easily pull the data from via their REST-APIs.

So it would be much easier to just query the DVLS-REST-API, instead of opening a powershell, connecting to DVLS, exporting the report, parsing the report, refrencing the id with our system, and the importing into the timeline.

Best regards,

Kilian

So basically, we need the command Export-RDMActivityLogsReport from the Powershell-Module, but available via the REST API.

That would make it much easier for us to record the billable hours and import those into our billing system.

Kind regards,

Kilian

We need to retrieve the custom-fields of an entry via the REST-API. It seems that this is currently not possible.

Kind regards,

Kilian

Hi André,

I thought I could give some pointers on how this system works in our case, and it might help your IT team, or anyone for that matter, to set up a test or production environment.

Use Case:

Our DVLS sits behind a reverse proxy that only lets connections pass if a valid client certificate can be provided by the user or the program accessing it. RDM in most cases.

This whole setup is to protect the DVLS from the evil goblins that roam the internet. If a exploit is discovered in IIS, it wouldn't matter to us, as nobody without a client certificate can even reach the server. The client certificates are only distributed to people and devices who are known and protected by our organization.

Software:

As software for reverse proxy we use a pfSense virtual machine with the HA-Proxy package installed.

pfSense is also the certificate authority that signs the client certificates and manages the certificate revocation list.

Certificates:

For the internet-facing interface, we use a Let's Encrypt certificate that is issued for the exact name that the DVLS is reachable from. e.g. dvls.company.com

When creating the internal CA, make sure to not use any special characters in any of the fields, as this prevents HAProxy from asking for a certificate.

When creating the CRL, make sure to set the CRL-Lifetime to 730 days. If you type in 999 days and wonder why nothing works anymore, that's why. Ask me how I know :(

HA-Proxy:

To get HAProxy to only let connections through that have a valid certificate. You will need to have an ACL that's asking for a client certificate.

ACLs:

Actions:

Client-Certificates:

I would be happy to support you in any way possible. Please do not hesitate to ask,

To protect myself from internet goblins, I have redacted some information in the images, but I would be more than happy to share more information via DMs or other forms of communication.

I hope it helps!

Thank you for looking into this topic.

This workaround unfortunatly does not work. I tried with 3 android phones, but no luck.

If you would be interested, I would be happy to provide a login alongside a client-certificate for our DVLS instance, so that you do not have to setup a test enviorment.

Kind regards,

Kilian

PS: If you are already working on client certificate authentication on andorid. I have colleague on MacOS who would appreciate this feature as well. (I know the codebases are probably significantly diffrent)

We have a DVLS behind a revery proxy that only lets connections pass if they have a valid client certificate.

RDM on windows has a very useful feature for this in the data source configuration.

I would like to have access to the data source on my phone, but unfortunatly there is no such option on android.

In the setting of the app, there is an option named "Certificates" with the description of "Manage the certificates that can be used by the app", but I still cannot connect to DVLS when I import my client certificate into there.

Am I just using this feature wrong or is there currently no way to connect to a DVLS that requires a client-certificate?

Your are more than welcome to integrate my script into RDM.

As an MSP, we have to login to our customers Microsoft365 quite often.

The login forms of the office-portal is not really compatible with the standard tooling in RDM.

You can work around that by using an "After-Open"-macro, but that is prone to breaking when the device is slow or Microsoft is being slow.

I have written a custom script that can automate the login.

It works by waiting for the input elements to become visible and fills them as soon as they appear.

It can even handle the OTP.

The script is available on my Gitlab as I might need to update it, if Microsoft decides that the current login experience is not painful enough.

Link to the script on Gitlab

To use the script you will need to insert it into the Custom-Script option in your website entry.

You will also need to allow the password to be used in a script.

A preconfigured .rdm file can also be found on gitlab.

I hope it helps someone who might be stuck with a macro or even a manual login.