snirh

Hi,

I've been asked to give a report about the users usage of RDM in our environment.

We are using a desktop edition and a central SQL DB.

Did not see any report on that.

How to do this ?

Snir

We are using RDM and an SQL data source for everyone with repositories.

All of the users have Read/Write permissions to the DB (as a necessity).

For now every user can upgrade the DB due to his permissions, how can I enable the upgrade option just for the Admin ?

Snir

One day RDM stopped adding logs to the system, when I enter to the "Administration Logs" under "Administration" the logs stopped on the 21st of March.

We did not do any change to the system.

We do have Activity logs via the reports.

We use ver 2022.1.23

Snir

Thanks

are you affected from the latest log4j vulnerability ?

https://unit42.paloaltonetworks.com/apache-log4j-vulnerability-cve-2021-44228/

?

I'm sorry but I have some session I would need other creds, if you override all the creds on the folder level I do not have this customization option.

If I do it on the credential entry (like I've been working for the last several years) I have all the option I need.

I just need to be able to store personal settings on cyberark entry like on a user entry.

Snir

Ok, I'll explain my configuration, maybe it will help.

I use central SQL DB for all the connections.

I've configured one credential entry for "User Login" and I use it for all the RDP sessions (I have above 2000).

in order to give each user the ability to use their own credentials, each user right-click on the "User Login" entry and configure his credentials under "User Specefic Settings".

I want to change this to use CyberArk Creds, so I need the options to change the settings that each user uses with the CyberArk Vault.

I expected that when I user the user-specific-settings I will get the same window as the original (CyberArk1.jpg picture) but instead I got regular window (CyberArk-User.jpg)

Hope I explained myself...

Snir

Hi,

Just wanted to integrate CyberArk as a Credential entry (CyberArk1.jpg).

The way I need to do it is to edit the "user specific settings" for each user to direct him to the correct entry.

The problem is that the window that opens for this is for a regular user/password entry (CyberArk-User.jpg).

I'm working directly with CyberArk team and they are very interested to integrate RDM with there system, they are asking who do you work with in CyberArk so they can talk to them internally.

Thanks

Snir

Under Administration -> Pack Data Source -> Index Maintenance...

I updated to the latest and run after reindex, try it...

Any news ? we are suffering here...

1... :(

This is search only:

Main thread (UI)

----------------------------------------

TreeView.LoadConnectionList...

GetGroupInfos : 0 ms

BeginUpdate...

ApplyGroupCustomImages : 0 ms

LoadConnectionInTreeNode : 1973 ms

PreCreateGroups : 0 ms

BeginUpdate : 1979 ms

TreeView.LoadConnectionList : 1979 ms

SelectionChanged : 36 ms

This is after logs cleanup...

From the Profiler (level 3):

Thread : 17

----------------------------------------

17 - --> select ConnectionID, UserID, State, ExpirationDate, MachineName from ConnectionState : 23 ms

Thread : 16

----------------------------------------

16 - --> select ConnectionID, UserID, State, ExpirationDate, MachineName from ConnectionState : 4 ms

Main thread (UI)

----------------------------------------

TreeView.LoadConnectionList...

GetGroupInfos : 0 ms

BeginUpdate...

LoadConnectionList : 0 ms

LoadConnectionList : 9 ms

ApplyGroupCustomImages : 0 ms

LoadConnectionInTreeNode : 1645 ms

PreCreateGroups : 0 ms

BeginUpdate : 1741 ms

TreeView.LoadConnectionList : 1742 ms

SelectionChanged...

LoadConnectionList : 0 ms

LoadConnectionList : 0 ms

SelectionChanged : 40 ms

TreeView.LoadConnectionList...

GetGroupInfos : 0 ms

BeginUpdate...

LoadConnectionList : 0 ms

LoadConnectionList : 0 ms

ApplyGroupCustomImages : 0 ms

LoadConnectionInTreeNode : 1543 ms

PreCreateGroups : 0 ms

BeginUpdate : 1588 ms

TreeView.LoadConnectionList : 1588 ms

SelectionChanged...

LoadConnectionList : 0 ms

LoadConnectionList : 0 ms

SelectionChanged : 49 ms

TreeView.LoadConnectionList...

GetGroupInfos : 0 ms

BeginUpdate...

LoadConnectionList : 0 ms

LoadConnectionList : 0 ms

ApplyGroupCustomImages : 0 ms

LoadConnectionInTreeNode : 1620 ms

PreCreateGroups : 0 ms

BeginUpdate : 1658 ms

TreeView.LoadConnectionList : 1658 ms

SelectionChanged...

LoadConnectionList : 0 ms

LoadConnectionList : 0 ms

SelectionChanged : 37 ms

========================================================

And when I tried to edit an open entry (here the level was 1):

Main thread (UI)

----------------------------------------

reload: False hasSecurityChanged: False hasChanged: False

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit...

DisposeAndClearConnections : 0 ms

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit : 26 ms

reload: False hasSecurityChanged: False hasChanged: False

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit...

DisposeAndClearConnections : 0 ms

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit : 20 ms

SelectionChanged : 58 ms

reload: False hasSecurityChanged: False hasChanged: False

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit...

DisposeAndClearConnections : 0 ms

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit : 24 ms

FrmConnection.LoadConnectionInControls...

FrmConnection.RegisterDescriptors : 1 ms

FrmConnection.LoadGroups : 6 ms

FrmConnection.freConnectionMorePanel : 1 ms

FrmConnection.freConnectionVPNPanel : 13 ms

FrmConnection.freConnectionAdvancedPanel : 0 ms

FrmConnection.freConnectionUIPanel : 0 ms

FrmConnection.FreConnectionSecurityPanel : 0 ms

FrmConnection.CreateConnectionSettingsFrame : 132 ms

FrmConnection.LoadCredentialSessions : 41 ms

FrmConnection.LoadCredentialSessions : 0 ms

FrmConnection.LoadCredentialsToControls : 2 ms

FrmConnection.Panels.LoadConnectionInControls...

LoadConnectionList : 1 ms

FrmConnection.Panels.LoadConnectionInControls : 62 ms

FrmConnection.LoadConnectionInControls : 266 ms

Database.SaveConnection : 1779 ms

reload: False hasSecurityChanged: False hasChanged: True

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit...

HasOfflineChanges...

HasOfflineSessionChanges : 0 ms

HasOfflineChanges : 0 ms

OfflineManager.GetDataSourceSettings : 0 ms

LoadConnectionsFromDataSource...

LoadDataSourceSettingsFromDataSource...

GetDataSourceSettings : 1 ms

LoadDataSourceSettingsFromDataSource : 1 ms

GetConnections...

Database.GetConnections...

Reading connections from database : 0 ms

DecryptData : 0 ms - Count : 1

DeserializeData : 0 ms - Count : 1

Database.GetConnections : 19 ms

GetConnections : 19 ms

DoMergeConnections...

PrepareConnectionList : 0 ms

DisposeAndClearConnections : 0 ms

DoMergeConnections : 1 ms

LoadConnectionsFromDataSource : 37 ms

DisposeAndClearConnections : 0 ms

LoadConnections [Microsoft SQL Server : Prod SQL] - 64-bit : 59 ms

TreeView.LoadConnectionList...

GetGroupInfos : 0 ms

BeginUpdate...

ApplyGroupCustomImages : 0 ms

LoadConnectionInTreeNode : 764 ms

PreCreateGroups : 98 ms - Count : 1

BeginUpdate : 865 ms

TreeView.LoadConnectionList : 865 ms

SelectionChanged : 15 ms

Thread : 7

----------------------------------------

7 - OfflineManager.SaveMeta...

7 - 64f7f33c-7b62-4d4a-9655-0ce73780242f

7 - SetSecurityInfo : 1 ms

7 - UpdateOffline : 0 ms

7 - PrivateConnectionManager.Saving : 0 ms

7 - ConnectionOverrideManager.Saving : 5 ms

7 - OfflineManager.SaveMeta : 7 ms

Thread : 4

----------------------------------------

4 - ThreadQueue.AddRow...

4 - Offline.AddOrUpdateConnection : 0 ms

4 - ThreadQueue.AddRow : 321 ms - Count : 1

What can you say from that ?

Did not help.

Also all the actions like adding an entry , edit one hangs a while before prompting...

Hi,

Working with 13.0.2 and SQL DB as data source, I have around 2300 entries in my repository but the DB itself has 10 repositories in total.

The search is slow and it takes time to filter the list.

How can you help me check things ?

(Tried to use the optimize DB and cleaned the logs... no help there )

Snir

I see that there is pass-phrase v2, how do I move from ver 1 to ver 2 ?

just change the combo ?

I have 20 users using this with SQL, will they work after the change to ver 2 ?

Hi,

Is my problem fixed in ver 13 ?

ok, please update me when it is released

thanks

snir

what do you mean by "another provider"?

unencrypted ?

Will not pass our security policy.

any news ?

Hi,

is this fixed in 12.6.0.0 ?

I'm using the java add on not a browser.

The items that are not written are the $username$ and $password$

Snir