Skip to content

v1.36.0

Latest
Compare
Choose a tag to compare
@cuongssh cuongssh released this 03 Sep 10:24
a21346a

Adding support for PrivX 36.0. Some models have new fields:

  • ManagedAccount model: new SamAccountName and DisableRdpCertAuth properties.
  • ManagedAccountCreateData, ManagedAccountChangeSet model: new DisableRdpCertAuth property.
  • LocalUser model: new Attributes property and Attribute type.

Note: ensure that the values of these fields are not accidentally overwritten (e.g with zero values) when updating one of the mentioned resources.

Some notable changes in PrivX 36.0 (please refer to PrivX documentations for full details):

  • Custom attributes can be assigned to local user.
  • ManagedAccount SecurityIdentifier field can be modified (if needed).
  • ManagedAccount SamAccountName can be specified.
  • RDP certificate authentication can be disabled for a ManagedAccount via DisableRdpCertAuth flag.

The changes above are part of the support for RDP certificate authentication using strong mapping (SID extension). The SecurityIdentifier (SID) is scanned automatically if possible. Otherwise, it can be edited via custom attribute for local user or via SecurityIdentifier property for ManagedUser. Legacy Windows account format DOMAIN\username can be used in a host account configuration together with a target domain.