The Indeed PAM SSH Proxy component is installed on a dedicated server, and installation on an access server is also possible.
Go to the directory C:\Program Files\Indeed PAM\SSH Proxy\SshProxy and edit the file Pam.SshProxy.Service.exe.config:
<pamProxy ... />:
IdpUrl - is the URL of Indeed PAM IdP
SshProxySecret - Secret for client keys for additional component authentication
The secret is generated by the console utility Pam.ConsoleApp.exe |
<pamProxy Port="22" ApiUrl="https://pam.domain.local/pam/core" IdpUrl="https://pam.domain.local/pam/idp" SshProxySecret="sL3EwbV91dJnEhcw75Dl0xkamylQMMAjBj0dQF6xWqfQZ+Dgu06JgkQJH+anWABthQzQyBdtWk8s6oNuvgEpRA==" /> |
After editing the SSH Proxy configuration file, restart the PAM.SshProxy.Service service
C:\>powershell -command "Restart-Service PAM.SshProxy.Service -Force" |