stevecharon

Hi David,

fast as ever...

I was aware that this would be no minor feature.

The implications are HUGE.

Looking forward for an even better RDM.

Just updated to 10.6.7 and looking around for all the hidden goodies .

Greetings from Germany

Is this currently in the product?

What I wish is to have some prototypes like in zabbix and autocreate new hosts.

So I generate a VM prototype and point to vcenter server abc.xyz.local.

Any new VM created will be auto-generated in RDM to a subfolder "discovered VMs" which I can configure to have specific rights, so no unauthorized access can slip through.

For Windows VMs you could configure additional RDP-Connection, for Linux-VMs you could give an SSH-Template.

Of course, this doesnt have to be in place all at once!

Same thing with prototyped switches, iLO (HP) or iDRAC (Dell) Cards, USV-Devices or Printers, SQL-Servers or or or.

I DO NOT want a network scan as this would lead to something like https://forum.devolutions.net/topic17724-remote-desktop-manager-autodiscovery.aspx where tymbrwlf got fired because of suspicous behaviour.

Not every RDM-connected Client should be allowed to autodiscover.

Especially for our RDM Server this would make really sense and we would have our RDM up-to-date.

Hi Maurice,

I already noticed the shortcut feature.

But with over 900 remote connections I would have about 4000 connection shortcuts under the corresponding hotline vm.

Till the feature is implemented we would have to rely on our excel sheet, where one could see which connection is on what VM.

Our project team has denied the shortcut feature for this objective to keep a small footprint.

But there are some scenarios for this feature.

So, again thanks for your hints.

Steve

Hi Marice / David,

thank you for the quick response (as always).

As I have answered off forum I post my mail reply here for other forum users:

Our users need to see the connection on their computers in order to be able to find the right VMs for that connection because of incompatible IPsec clients or different versions of applications installed on the machines.Then, when connected with the VM, the user needs to start the connection inside the VM, which is running with another account so that the different rights could easily be set up. Another approach would be to allow multiple groups assigned to a connection entry.

Best regards

Steve

Hi,

we are close to publish our new hotline infrastructure to our support people.

We have the following set up so far:

10 VMs with Server 2008 R2 on which the dialup and vpn connections are settled.

RDM on each VM to leverage the user/password hell

RDMS to back the RDM for better administration on a group basis.

RDM is to be installed on all support peoples machines, so they could connect easily to a hotline-VM via vmware-console.

The deal is that they should see all the connections on their own pcs but should not "open" it.

This should be done alone on the hotline-VMs because of security-, configuration- and traceability-management.

But even the least right ("View") permits a user to connect to the remote site.

So we have no possibility as of now, to configure RDM(S) in the way we want.

We are current on RDMS and RDM is version 9.0.3 (last version with custom installer available).

best regards

Stevecharon

+1 from me

This would be very comfortable while not on my own machine..

CustomInstaller is a nice service.

But as we have a MSI underneath why dont we get a couple of properties to change and the thing is done?

Why do I have to buy this as a service?

Hi David,

as Xarcas mentioned it is usually the IT Teams obligation to add/remove Users for a particular objective (like allow/revoke the use of RDM(S)).

So all IT should do is configure a AD-Group "RDM-Users" in the SQL-Server where the permitted users will be put in.

The role for RDM-Users will be preconfigured for general access to RDM whereas the access to specific Connectons or Group of Connections will be reflected in RDM-ConnectionGroup1/2/3 accordingly (maybe named RDM-Customer1 and so on if you like).

So security should be not that big problem. Everything could be accomplished with minimal security impact as long as AD staff and DB staff communication is working.

Just a matter of proper pre-deployment-planning as it should be with every IT project your running in.

Hi, I sometimes open several connections at once to configure some of our Switches or Storage Systems in parallel.

For those systems we have configured comments to keep track of what has been done.

But when the comment dialog pops up (sometime it goes behind some other windows and is overlooked) it does not show the session name.

So if I close several connections I don't know for which system I have to enter the comment.

If the comment windows went behind other windows it is even more difficult to guess which system is meant.

Does anyone work with the comment function so far or am I the only one who goes this way?

I would really appreciate a clearer display in the comment dialog to get even better efficiency.

Best regards

Steffen

Hi, I tested my ESX Putty with embedded and it works with the second try.

David, embedded SSH with typing macro works too. I had to do an initial delay of 3 secs to have it running.

Having RDM 7.0.3.0 by the way.

Hi, I tested my own Putty with an ESX host and it works just fine!

here is my config:

<?xml version="1.0"?>

<ArrayOfConnection>

<Connection>

<ConnectionType>Putty</ConnectionType>

<Events />

<Group>SSH</Group>

<ID>6fe01a55-a2f7-42c3-a04b-3bd102caa421</ID>

<MetaInformation>

<Expiration d4p1:nil="true" xmlns:d4p1="http://www.w3.org/2001/XMLSchema-instance" />

</MetaInformation>

<Name>ESX1</Name>

<Putty>

<Host>ESX1</Host>

<LoginName>root</LoginName>

<PortFowardingArray />

<SafePassword>secret</SafePassword>

<Scripting>

<string>uptime</string>

<string>esxtop</string>

</Scripting>

<UseSession>false</UseSession>

</Putty>

<Stamp>4128fd58-7e5c-4e2a-862f-93050888ca81</Stamp>

<SubMode>-1</SubMode>

<WebBrowserApplication>IE</WebBrowserApplication>

</Connection>

</ArrayOfConnection>

Hi, what kind of device do you have?

Is it a router, switch, computer?

What make and model?

Nice feature. I didnt even realized that it was there all the time.

But it wont work with the $NAME$ - Var.

Furthermore, which device are connecting to?

I recently did a HP switch config update with putty commands (thru telnet) and it worked like a charm.

Digged a little deeper:

My first try on SSH external seemed to fail, since embedded worked with a standard delay of 500 ms.

I noticed that SSH works in external mode also. But I had to put delay to 5000 ms to see the commands.

It is also slightly different if you use a saved putty session or have the options set in RDM.

With the native putty session the delay has to be set higher than the RDM-configured one.

But it definitely works in every case if delay is high enough.

I wish we could set the initial delay separately from the subsequent command calls to get a quicker response.

So it might depend on the responsiveness of the device you are connecting to.

I would recommend embedded mode on use cases with commands since the chance that a command be swallowed is less in this mode.

Very annoying if the commands are depending one on another...

edited by stevecharon on 5/5/2012

Hi Oki,

have you had the opportunity to fix this?

Would be really great to get this working as expected.

best regards

Steve

openvpn could do it with custom scripts.

I had it running in earlier versions until I decided to set the routes on the server side and push it to the clients.

edited by stevecharon on 5/1/2012

I agree - this would be a time-saver!

But not only on new imports. Every new connection (let it be one or two at a time) would be instantly pre-populated with my standard sub-connections.

I can see the quality officer jumping in the air, literally.

Dont know how this could be coded but I like the idea.

But if I have nearly every connection populated with sub-connections, the session tree should also show the sub-connections.

Hi Andre,

sorry for the late answer.

I have been thinking on this for a while.

I guess that you this has to be done in two steps:

1. log on to the 2X server and query for the configured applications

2. fill the application field with the gathered information

This would be similar to the auto-logon for IE sessions where you could configure the url and RDM parses the output to guess the button_ids.

Works in most cases for me.

To achieve this you could study the web portal examples http://2x.com/downloads/AppServer-LoadBalancer/2xWebPortalSample.zip or the

http requestor http://2x.com/downloads/AppServer-LoadBalancer/2XHttpRequestor.zip or the

2X scripting http://2x.com/downloads/AppServer-LoadBalancer/2XScripting.zip

Dont know which would fit best for this so I mentioned all of it.

hth,

Steve

Hi again,

I changed the credentials in the rdm session for 2x connection to no avail.

Only after setting host and port it connected again.

But the application list is not updated. So one has to guess which application has been provided.

Of course an admin could create the session for the user (and the admin should know the details...)

I guess the application list I mentioned in the previous post was gathered from the registry or such.

So how could a user enter the right information without having a connection in the first place?

From an admin point of view it works kinda well.

The dumb user probably will have some steps to climb.

I have to commit that this addon evolves quickly.

thank you andre, again

Steffen

Is there something I can do on this?

I saw the German translation and things like "Ausfahrt" for the english "Exit" brings a smile on my face (Ausfahrt is used on traffic signs for the motorway exit).

I am German and could help if you like.

Chapeau! Andre,

new connection -> klick on Application dropdown

it is prefilled with all the configured applications!

Connect session and ta-daa there it is.

this works great.

will now look at the other options and report again.

best regards

Steffen

edited by stevecharon on 4/20/2012

I got it.

I had another installed version (2.16) with the corresponding plugin in the programdir.

It seems that Keepass searches in EVERY installationdir it knows of.

Cross-checked this with my 2.18 installation. (renamed all the rdm-keepass-plugin.dll files and activated only the wrong ones and the errors are popping up - then activated only the right ones for each version and putting them in the installdir of the other installation -> Keepass starts without moaning and RDM integration works like a charm).

So you can close this topic and I open this weekend with another piece learned (I hope I don't drop other knowledge in return..)

thank you David for your patience

Hello Andre,

thank you for your effort on this topic.

I just took a first look and configured our 2X Server.

But I only get an error saying

"Code 02/00000003

The Client could not establish a connection to the remote computer.

The most likely causes for this error are:

1) The servers are too busy to service your request

2) The machine is not part of the farm."

But the connection through the 2X Client directly succeeds.

My settings in the 2X Client are:

[HKEY_CURRENT_USER\Software\2X\AppServerClient\Farms\F0000\Conn0000]

"Mode"=dword:00000000 --> (=regular Gateway)

"Server"="2xserver.domain.local"

"ServerPort"=dword:00000050 --> (=80)

"tmpgw"=dword:00000050 --> (=80)

"tmpssl"=dword:000001bb --> (=443)

We have 2X ApplicationServer 9 installed and I tested with both 2X Client 9.0 and 10.1.

best regards

Steffen

No, there is only one Remotedesktopmanagerplugin.dll in the keepass dir.

Hi David,

I tried this and Keepass integration works.

But on startup of keepass the RemoteDesktopManagerPlugin.dll

triggers the message again.

so:

1) integration of KP works in RDM

2) KP keeps moaning

I don't know if this is a problem of KP or the plugin