We have recently aquired CA PAM 2.8.2 and I would like to know if it needs a special configuration to display the target user info in the Session Recording for Unix accounts. We hadn't make any additional configuration to display that info in the Windows targets, but actually we can't see the Target user account when watching session recordings.
Thanks in advance
I am a little confused as to why you are seeing USER and DOMAIN fields for an SSH recording. These 2 fields are used for RDP recordings but I do not believe those fields should even appear. are you seeing these fields on all your SSH recordings?
Thanks for your reply,
Just to clarify, what i'm tying to record is the target account (privileged account for connect to the target server) for the Unix ssh connection. We connect using putty (tcp service) and also ssh applet.
Hi Alberto, You must be using a TCP/UDP service rather than the built-in SSH applet, which wouldn't have the USER and DOMAIN fields like Joe mentioned. They are populated for me with 2.8.2, with our without auto-logon, using a Linux target device. If there is no auto-logon and I have to provide username and password, it will take a few seconds before the fields are populated. What SSH client are you launching, how is it configured, and what type of target device are you connecting to?
We are using the auto-logon to connect via SSH to AIX environment. I have tried with no auto-logon but in the session recording we can't see the Target account. Is there something am i missing?
Hi Alberto, I observe the same problem when connecting to an AIX target device. Please open a support case, it looks like this needs to be fixed.
By the way, you can use the "View Password Requests” report available from "Reports > Run” on the Password Management UI to find out which account was used to logon to the session. Also, the SSH built-in applet writes a different type of recording, and you won't see those fields when you play back such a recording. That is just how it works now.
I tested built-in SSH applet against AIX 6 and CentOS with PAM 2.7 and 2.8.2. User info for both are not displayed.
Right, that's what I stated above.