PAM - Is Agent installation compulsory?


Is the installation of agent on host compulsory?

If I only want to do RDP and session recording. Can I achieve it via RDP
relay without installing agent?

However, the documentation in the add host section only allow me to
specify an agent name.
How do I configure a RDP relay to a specific host without installing
agent?

Under what circumstances do installation of agent is necessary?


--
mochacoffee
------------------------------------------------------------------------
mochacoffee's Profile: https://forums.netiq.com/member.php?userid=6175
View this thread: https://forums.netiq.com/showthread.php?t=54599

  • mochacoffee,

    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.

    Has your issue been resolved? If not, you might try one of the following options:

    - Visit http://www.netiq.com/support and search the knowledgebase and/or check all
    the other support options available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.netiq.com)

    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.netiq.com/faq.php

    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.

    Good luck!

    Your NetIQ Forums Team
    http://forums.netiq.com


  • As I understand it, the RDP-Relay feature for Windows doesn't act as a proxy like it does in SSH-Relay for UNIX/Linux. Once a session is started, the OS interaction is direct like it would be with a Remote Desktop Connection.. I'm not sure why the process differs between Windows and Linux, but there are likely either protocol requirements or native windows calls which need to be monitored differently.. For this reason, an agent is required to be installed and registered to the Manager in order for sessions to be captured. I'm not sure if it's possible any other way.