The SSL cert unknown is probably unrelated.  This is because the Framework managers self sign a cert to get going. There is a generate a CSR option. (I think it is Hosts, find the framework server, packages, then Framework Manager and the left menu will offer Request and install cert options).

Did you apply a restricted group to the SSH Relay rule?  I.e. Is there a requirement to auth?  Whom is allowed?

If the jnlp file is downloaded and launches, but is blank or perhaps not prompting for the 'Submit User' credential. I suspect there is some issue establishing an ssh connection with the sshrelay server. Try opening the jnlp in Notepad and check for the property value of "jnlp.pamHost," which should be the sshrelay server I believe. Verify the client/workstation can establish a connection to that ip address and port with something like telnet and if it's a dns address, please also verify the name can be resolved by the workstation. Otherwise, there are some Java Client Options that should be available in Windows for tweaking connectivity type things like certificates, etc. that might be worth exploring as well.

If the jnlp file is downloaded and launches, but is blank or perhaps not prompting for the 'Submit User' credential. I suspect there is some issue establishing an ssh connection with the sshrelay server. Try opening the jnlp in Notepad and check for the property value of "jnlp.pamHost," which should be the sshrelay server I believe. Verify the client/workstation can establish a connection to that ip address and port with something like telnet and if it's a dns address, please also verify the name can be resolved by the workstation. Otherwise, there are some Java Client Options that should be available in Windows for tweaking connectivity type things like certificates, etc. that might be worth exploring as well.

If the jnlp file is downloaded and launches, but is blank or perhaps not prompting for the 'Submit User' credential. I suspect there is some issue establishing an ssh connection with the sshrelay server. Try opening the jnlp in Notepad and check for the property value of "jnlp.pamHost," which should be the sshrelay server I believe. Verify the client/workstation can establish a connection to that ip address and port with something like telnet and if it's a dns address, please also verify the name can be resolved by the workstation. Otherwise, there are some Java Client Options that should be available in Windows for tweaking connectivity type things like certificates, etc. that might be worth exploring as well.

I should have also mentioned that you can also use your preferred ssh client on your workstation as well and simply connect to the sshrelay server (:2222).

I much prefer this approach. Since you get a menu of availanle hosts, and you select the one you want and forward you go.  And MFA worked too as well, I recall.

Hi Geoffrey,

Can you guide me where .jnpl  file is in my access control, In admin portal.