Symantec Privileged Access Management

 View Only
Expand all | Collapse all

Launching Database Client from CA PAM Console

  • 1.  Launching Database Client from CA PAM Console

    Posted Jan 23, 2017 05:47 AM

    Hi All,

     

    Is it possible to launch the database client within the CA PAM Console. We have integrated a MS SQL database with CA PAM  following the below steps,

     

    1. Added a new device,

    2. Created a new application for SQL Client.

    3. Added an account for login to SQL Database.

    4. Created a service for SQL Client.

    5. Created Access policies.

     

    Following the mentioned steps, a user needs to manually launch the SQL Client and provide credentials, after checking in the credential Management.

    Is it possible that the client is launched automatically, when user selects access method/service type for SQL Server ?

     

    Thanks,

    Vasu 



  • 2.  Re: Launching Database Client from CA PAM Console

    Broadcom Employee
    Posted Jan 23, 2017 06:13 AM

    Hi Vasu, 

    If I correctly understand, you are asking to launch the MSSQL Studio Management via Transparent Login.

    You can do this by creating an RDP Application Service.

    Take a look at the following discussion which explain how to configute the Windows TL:

    PAM and Transparent Login presentation 

    Go to Services->RDP Application and create a Service. 

    Below there's an eg for MSSQL 2014 Mngmnt Studio.

     

     

     

    where the SQL Catma XML configuration is:

    <window id="">
    <combobox id="[CLASS:WindowsForms10.COMBOBOX.app.0.34f5582_r43_ad1; INSTANCE:1]" type="index" value="0"/>
    <edit id="[CLASS:Edit; INSTANCE:1]" host="true"/>
    <combobox id="[CLASS:WindowsForms10.COMBOBOX.app.0.34f5582_r43_ad1; INSTANCE:3]" type="index" value="0"/>
    <edit id="[CLASS:Edit; INSTANCE:2]" username="true"/>
    <edit id="[CLASS:WindowsForms10.EDIT.app.0.34f5582_r43_ad1; INSTANCE:1]" password="true"/>
    <sleep time="200"/>
    <send text="{ENTER}" id="window"/>
    </window>

     

    Thanks,

    Regards



  • 3.  Re: Launching Database Client from CA PAM Console

    Posted Jan 23, 2017 07:17 AM

    Not Authorised to view the thread https://communities.ca.com/thread/241761153 



  • 4.  Re: Launching Database Client from CA PAM Console

    Broadcom Employee
    Posted Jan 23, 2017 07:26 AM

    Ups! Sorry. Check here:

    RDP Connections - CA Privileged Access Manager - 2.7 - CA Technologies Documentation 

     

    Here you can find how to create an RDP Service and what is required to install in the servers to make this work.

     

    Regards



  • 5.  Re: Launching Database Client from CA PAM Console

    Posted Jan 24, 2017 07:35 AM

    I configured the target server , windows 2008 r2, but unable to find any option to enable "Run Learn Mode" in CA PAM.  We are using CA PAM v2.6  in our environment.



  • 6.  Re: Launching Database Client from CA PAM Console

    Broadcom Employee
    Posted Jan 25, 2017 09:39 AM

    Hi verma.vasu,

     

    To get to learn mode you need to hover over the word RDP on the Access page. This will bring up a box with a checkbox inside to enable learn mode. You would check this box then click Launch. Once it is launched an RDP session with the learn mode tool should come up.

     

    This screenshot should help:

     

    In case you run into problems setting up the RDP application this tech doc may be useful:

    https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec1357953.html 

     

    -Christian



  • 7.  Re: Launching Database Client from CA PAM Console

    Posted Jan 30, 2017 07:12 AM

    Found it, but when tried to login using learn mode enabled, there is an error window displayed. 



  • 8.  Re: Launching Database Client from CA PAM Console

    Broadcom Employee
    Posted Jan 30, 2017 09:49 AM

    Hi verma.vasu,

     

    I have never encountered an error launching the learn tool like this. You may be able to find out more about why this error occurred from the Windows logs. If this continues and you are unable to get the tool to load then it may be best to open a support ticket to have this looked into.

     

    -Christian



  • 9.  Re: Launching Database Client from CA PAM Console

    Posted Jan 31, 2017 02:01 AM

    I rectified the issue, some and learn tool was launched successfully. I created a script to open the client tool, enter hostname and click on connect. When I tried running the script  using debug, a cmd window poped up, but no activity was performed. Pasting the script below,

     

     

    <window id="">
    <edit id="[CLASS:Edit; INSTANCE:1]" text="sqlhost"/>

    <click id="[CLASS:WindowsForms10.Window.8.app.0.33c0d9d; INSTANCE:4]" />
    </window> 



  • 10.  Re: Launching Database Client from CA PAM Console

    Broadcom Employee
    Posted Jan 31, 2017 08:50 AM

    Hi verma.vasu,

     

    Your script looks good. When using debug mode it is important to note that the application does not launch itself. You will need to either 1) launch the application after starting debug (while the cmd window is up), or 2) open the application, then run debug, then after the cmd window appears you would switch over focus to the application. In either of these cases the script should be run when the application gets focus.

     

    Note: When running the finalized RDP Application from the PAM GUI the action of launching the RDP Application session will start the program for the user.

     

    -Christian



  • 11.  Re: Launching Database Client from CA PAM Console

    Posted Feb 01, 2017 02:38 AM

    Tried both options, no luck. The script is not executing. 



  • 12.  Re: Launching Database Client from CA PAM Console

    Broadcom Employee
    Posted Feb 01, 2017 09:00 AM

    Hello Vasu,

    It looks like someone has to go on a remote session with you and work through the problem. If not done yet, please open a support case.

     

    Thanks,

    Ralf Prigl