Page Comparison

Problem

Setup Child or Proxy credentials for SSH

Solution

Configure primary credentials through the UI as normal.

View configured credentials

Image Added

SELECT * FROM [Credential]

• Note the CredentialID which will be used to access the Proxy Server.

To Set up a Proxy Credential

Image Added

INSERT INTO ConnectionProxy ( ConnectionProxyTypeEnumID, Hostname, ProxyCommand, Username [, Password] ) SELECT ConnectionProxyTypeEnumID, 'ProxyHostName','ssh #hostname' ,'username' [,'password'] FROM ConnectionProxyTypeEnum WHERE ProxyType = 'ssh'

• ProxyHostName = The Proxy Server name or IP Address
• ProxyCommand = 'ssh #hostname' ( The #hostname will be replaced by iQSonar at time of scanning )

• Examples:

'ssh #hostname'

'ssh -i opensshkeyname -l username #hostname' - ( this format was used when the SSH keys still required a passphrase to be entered )

• Prompt = Not normally used
• PostCommandDelaySeconds = Not normally used
• Username = Username used to connect from Proxy Server to Target Server
• Password = [Optional] This value is only used if needed, when connecting from Proxy Server to Target.

Related articles

Problem

Setup Child or Proxy credentials for SSH

Solution

Configure primary credentials through the UI as normal.

View configured credentials

Image Modified

SELECT * FROM [Credential]

• Note the CredentialID which will be used to access the Proxy Server.

To Set up a Proxy Credential

Image Modified

INSERT INTO ConnectionProxy ( ConnectionProxyTypeEnumID, Hostname, ProxyCommand, Username [, Password] ) SELECT ConnectionProxyTypeEnumID, 'ProxyHostName','ssh #hostname' ,'username' [,'password'] FROM ConnectionProxyTypeEnum WHERE ProxyType = 'ssh'

• ProxyHostName = The Proxy Server name or IP Address
• ProxyCommand = 'ssh #hostname' ( The #hostname will be replaced by iQSonar at time of scanning )

...

• Prompt = Not normally used
• PostCommandDelaySeconds = Not normally used
• Username = Username used to connect from Proxy Server to Target Server
• Password = [Optional] This value is only used if needed, when connecting from Proxy Server to Target.

Related articles

...