-
Titel
How to customise access duration for a host -
Beschreibung
We have a requirement to limit the number of minutes for which access to a host can be granted through TPAM via PSM (sessions). Please advise if this is possible, and provide instructions on how to do this.
If we limit the session request to 30 minutes, what happens after 30 minutes?
1. Will the user be disconnected from PSM and lose data if they have not logged out?
2. Will PAR reset the password immediately?
3. Is there any way to notify a user a few minutes before the session is about to expire? -
Lösung
PSM Session duration can be changed from the "PSM Details" tab of the managed account using the /par interface.
Please see page 73 of the TPAM Administrators Manual regarding PSM Details. This is in section 16.0 Managing Accounts:http://us-downloads.quest.com/Repository/support.quest.com/Quest%20One%20TPAM%20Appliance/2.4/Documentation/TPAMUserAdministratorManual.pdf
1. Will the user be disconnected from PSM and lose data if they have not logged out?
16.11.8 Default Session Duration
This is the Session Duration that is displayed by default when requesting a session. It can be changed within the limits set by the Max Password Duration and the Access Policy session duration. TPAM will not automatically disconnect the session unless indicated by the global setting.
2. Will PAR reset the password immediately?
By default when a password request is released the password is reset. It will depend on your settings, please refer to the manual about this. See section 30.0 Releasing Passwords
3. Is there any way to notify a user a few minutes before the session is about to expire?
16.11.9 Session Exceeding Duration Notification
Allows email notifications to be sent to the primary contact specified for the system if a session exceeds the maximum session time for the request. Configurable parameters are: frequency (in minutes) of notifications; and threshold time (in minutes) before initial notification is sent for a session. Both values must be non-zero for notifications to be sent.