This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSH Relay not working for target Linux with custom port

prasenjitmass over 5 years ago

Hi,

I've configured PAM 3.6 for SSH Relay where the target Linux is working with port 5522. Configured the Linux credential vault with custom port. Now while tried to SSH relay (through putty ) user get authenticate to PAM but while selecting that target Linux , system showing messages " ssh: connect to host x.x.x.x port 22: Connection refused.

How to configure PAM to allow this custom port 5522 ?

Parents

0 Geoffrey Carman over 5 years ago

This was a joyous bug. I found it as well.
Two solutions:
Path to 3.6.02 released last week. It is a bug in the SSH proxy and they did not properly pass through a parameter.

If you cannot go to 3.6.02 then tick the X11 forwarding in teh Command Control rule (Do you ever get the urge to call it Command and Conquer like the video game? I do it all the time) and it will work. Even if you are not using X11.
Tyler (tdharris here) found the issue and resolution for me. Great guy.
Cancel
Vote Up 0 Vote Down

Cancel
0 tdharris over 5 years ago in reply to Geoffrey Carman

Haha, yes "Command And Conquer" all the way!

To follow-up, this has been resolved in the following releases or later of course:

- PAM 3.7:
https://www.netiq.com/documentation/privileged-account-manager-37/npam_37_releasenotes/data/npam_37_releasenotes.html#t4b2zalpq9yk

- PAM 3.6.0.2:
https://www.netiq.com/documentation/privileged-account-manager-36/npam_3602_releasenotes/data/npam_3602_releasenotes.html#t4b2md32j0ru
Cancel
Vote Up 0 Vote Down

Cancel
0 Geoffrey Carman over 5 years ago in reply to tdharris

Command and Conquer is better than Rise of the Triad or Doom I suppose. Different style games. I was playing Final Fantasy 5 on my phone which is kind of similar to C&C as I recall it.
I recall epic games after work at the office when I was a bit younger.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Geoffrey Carman over 5 years ago in reply to tdharris

Command and Conquer is better than Rise of the Triad or Doom I suppose. Different style games. I was playing Final Fantasy 5 on my phone which is kind of similar to C&C as I recall it.
I recall epic games after work at the office when I was a bit younger.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Rutuja Wadkar over 1 year ago in reply to Geoffrey Carman

Hi Geoffrey,

I've configured PAM 4.3 SSH Relay, I can connect to target sever using putty client using default port 2222. But I cant see the sever in user console. Why? I have deployed my PAM on Linux server.

Please guide me for this.
Cancel
Vote Up 0 Vote Down

Cancel

Menu

PAM Discussions

SSH Relay not working for target Linux with custom port

Resources