Info Security Memo
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org

Build Confidence

Focusing on Information Security 

Info Security Notes

Configure SSH Clients Integrate with PSMP (Putty SecureCRT)

7/27/2020

0 Comments

 
Configure SSH Clients Integrate with PSMP (Putty, SecureCRT)
CyberArk PAS solution supports launching of SSH connections directly from end users machine to a target system through the PSMP / PSM proxy server. For installation of PSMP and PSM, check following posts:
  • CyberArk PSMP - PSM for SSH Installation
  • CyberArk PAS PSM Installation - Part 4

Username Format

Use the PSMP server/address for the Computer/Address section. The Username can be blank to prompt for username or enter the username of the CyberArk end-user.
For example, my lab PSMP server is psmp.51sectest.dev / 192.168.2.27

Username format is as follows : username@Unix-username#domain@Unix-Machine-IP-Address
username – CyberArk username
Unix-username – privileged user allowed to login to the server
Domain – logon domain as registered in CyberArk gui
Unix-Machine-IP-Address – Target server IP address

CyberArk Configuration

CyberArk user connect to the server a remote server (E.g. 40.115.97.97 ) with privileged account netsec :



Hostname : psmp.51sectest.dev / 192.168.2.27  (PSMP server ip)
For example, using Vault user administrator 's privileged account netsec to log into remote target server 40.115.97.97

Putty session to log in with hostname / ip set to 192.168.2.27:
login as: administrator
[email protected]'s password:
Target user is required (to use domain account, specify <target_user>#<domain_ad           dress>).
Target user: netsec
Target machine address is required (to use port, specify <target_address>#<targe           t_port>).
Target machine address: 40.115.97.97

This session is being recorded
Using username "netsec".
Welcome to Ubuntu 18.04.4 LTS (GNU/Linux 5.3.0-1032-azure x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage

  System information as of Mon Jul 27 17:16:03 UTC 2020

  System load:  0.0               Processes:           115
  Usage of /:   4.7% of 28.90GB   Users logged in:     0
  Memory usage: 36%               IP address for eth0: 10.0.1.4
  Swap usage:   0%

 * "If you've been waiting for the perfect Kubernetes dev solution for
   macOS, the wait is over. Learn how to install Microk8s on macOS."

   https://www.techrepublic.com/article/how-to-install-microk8s-on-macos/

 * Canonical Livepatch is available for installation.
   - Reduce system reboots and improve kernel security. Activate at:
     https://ubuntu.com/livepatch

0 packages can be updated.
0 updates are security updates.


Last login: Mon Jul 27 14:51:55 2020 from 160.32.192.89
netsec@ubuntu18-1:~$




Here is setting with username : administrator@[email protected]

If it is domain 51sectest.dev's user test1, the username will be still in the same format: test1@[email protected], no need to change it to [email protected]@[email protected]

PuTTY setup

1  Menu Session -> Set Host Name

    2  Menu Connection -> Data -> set Auto-login username
    Auto-login username : administrator@[email protected]

    Using username "administrator@[email protected]".
    administrator@[email protected]@192.168.2.27's password:
    
    This session is being recorded
    Using username "netsec".
    Welcome to Ubuntu 18.04.4 LTS (GNU/Linux 5.3.0-1032-azure x86_64)
    
     * Documentation:  https://help.ubuntu.com
     * Management:     https://landscape.canonical.com
     * Support:        https://ubuntu.com/advantage
    
      System information as of Mon Jul 27 17:23:25 UTC 2020
    
      System load:  0.0               Processes:           112
      Usage of /:   4.7% of 28.90GB   Users logged in:     0
      Memory usage: 36%               IP address for eth0: 10.0.1.4
      Swap usage:   0%
    
     * "If you've been waiting for the perfect Kubernetes dev solution for
       macOS, the wait is over. Learn how to install Microk8s on macOS."
    
       https://www.techrepublic.com/article/how-to-install-microk8s-on-macos/
    
     * Canonical Livepatch is available for installation.
       - Reduce system reboots and improve kernel security. Activate at:
         https://ubuntu.com/livepatch
    
    0 packages can be updated.
    0 updates are security updates.
    
    
    Last login: Mon Jul 27 17:16:04 2020 from 160.32.192.89
    netsec@ubuntu18-1:~$
    netsec@ubuntu18-1:~$
    
    

    SecureCRT setup

    Menu SSH2 -> set Hostname and Username parameter




    via Blogger https://ift.tt/32V25p8
    July 27, 2020 at 01:47PM CyberArk
    0 Comments



    Leave a Reply.

      Categories

      All
      Architecture
      Blog
      Checkpoint
      Cisco
      Cloud
      CyberArk
      F5
      Fortigate
      Guardium
      Juniper
      Linux
      Network
      Others
      Palo Alto
      Qualys
      Raspberry Pi
      Security
      SIEM
      Software
      Vmware
      VPN
      Wireless

      Archives

      March 2024
      February 2024
      January 2024
      December 2023
      November 2023
      October 2023
      September 2023
      August 2023
      July 2023
      June 2023
      May 2023
      April 2023
      March 2023
      February 2023
      January 2023
      December 2022
      November 2022
      October 2022
      September 2022
      August 2022
      July 2022
      June 2022
      May 2022
      April 2022
      March 2022
      February 2022
      January 2022
      December 2021
      November 2021
      October 2021
      September 2021
      August 2021
      July 2021
      June 2021
      May 2021
      April 2021
      March 2021
      February 2021
      January 2021
      December 2020
      November 2020
      October 2020
      September 2020
      August 2020
      July 2020
      October 2019
      September 2019
      June 2019
      July 2018
      May 2018
      December 2017
      August 2017
      April 2017
      March 2017
      January 2017
      December 2016
      November 2016
      October 2016
      September 2016
      August 2016
      July 2016
      June 2016
      May 2016
      April 2016
      March 2016
      February 2016
      January 2016
      December 2015
      November 2015
      October 2015
      September 2015
      August 2015
      July 2015
      June 2015
      May 2015
      April 2015
      March 2015

      Print Page:

      RSS Feed

      Email Subscribe
    Powered by Create your own unique website with customizable templates.
    • Blog
    • Sitemap
      • Categories
    • Contact
    • About
    • Resources
    • Tools
    • 51sec.org