Why can't I see a warning message for session recording ?

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• PAM SAFENET LUNA HSM
• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM is configured to show a session recording warning message

"Warning, you are being monitored"

When using the SSH applet or the RDP applet there is no warning message shown when logging in, but if using  putty then the warning message is shown. We have checked the configuration, and session recording is enabled and the warning message configured. So why is this happening ?

Environment

PAM 3.2.X

Resolution

One of the reasons this may not work is if the user is a member of a user group for which the Option to On the user group the "Applet record warning" setting was set to "no".

To enable it, please do the following

• Access PAM by means of a web browser or the PAM client as a user with admin rights (Super or equivalent)
• Go to the users menu and Choose Manage User Groups

 

 

• Choose the group or groups to which the user belongs. In Basic Info you may see something like:

In this case, RDP and SSH applets will not show the warning message, but the Putty service will continue to display it.

This may happen for instance if the user is part of a group imported from LDAP.

If you want to have the session recording enabled, toggle this setting to Yes.

Additional Information

Basic Info Configuration
https://docops.ca.com/ca-privileged-access-manager/3-2/EN/implementing/provision-your-server/provisioning-users/configure-user-groups
 
CSV features  for users and groups
https://docops.ca.com/ca-privileged-access-manager/3-2/EN/reference/import-and-export-data-for-provisioning/user-groups-and-users