search cancel

Web Portal TCP/UDP Service not working for Auto-Logins

book

Article ID: 214455

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

When developing a Web Portal TCP/UDP Service in PAM to do auto-logins, a PAM Admin cannot get it to auto-login successfully.

Cause

 In order for PAM to do successful Web Portal auto-logins the following requirements must be met:

  1. An HTML auto-connection portal requires that the HTML field and button widgets be identified.
  2. The webpage must support right clicking, so we will be able to mark the correct fields (username, password and login button) during learn mode.

Environment

Release : 3.4.x, 4.0.x

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

To elaborate further, if we take the following commonly available website:

https://en.wikipedia.org/

Here if we click on the login page:

https://en.wikipedia.org/w/index.php?title=Special:UserLogin&returnto=Main+Page

and right click on the login area and choose "Inspect" (In Chrome) - you will see the following:

Here you can see it clearly has a htmlform with clear HTMLTextField's for loginText and loginPassword that PAM clearly can inject the credentials in.

The above example has a HTMLSubmit field that support the form that includes the Username and Password.

 

 

 

Attachments