Working with PAM in Java SDK

Accessing PAM connection settings for RDP, SSH, VNC, Kubernetes, and RBI in the Java SDK

PAM (Privileged Access Manager) records contain connection settings that define how to connect to privileged resources. The Java SDK provides three specialized classes to access these settings:

• PamRbiConnection - RBI (Remote Browser Isolation) connection settings including audio and clipboard controls

• PamSettingsConnection - Protocol-specific connection settings (RDP, SSH, VNC, Kubernetes)

• PamSettingsPortForward - Port forwarding configuration including local port settings

Access PAM Connection Settings

Example.java

import com.keepersecurity.secretsManager.core.*;

// Assume storage is already initialized
SecretsManagerOptions options = new SecretsManagerOptions(storage);
KeeperSecrets secrets = SecretsManager.getSecrets(options);

KeeperRecord pamRecord = secrets.getRecords().get(0);
KeeperRecordData data = pamRecord.getData();

// Access PAM settings field
PamSettings pamSettings = data.getField(PamSettings.class);
if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
    PamSetting setting = pamSettings.getValue().get(0);

    // Access connection settings
    if (setting.getConnection() != null) {
        PamSettingsConnection conn = setting.getConnection();

        System.out.println("Protocol: " + conn.getProtocol());
        System.out.println("Port: " + conn.getPort());

        // Access protocol-specific settings
        if ("rdp".equals(conn.getProtocol())) {
            System.out.println("Screen Width: " + conn.getWidth());
            System.out.println("Screen Height: " + conn.getHeight());
            System.out.println("Color Depth: " + conn.getColorDepth());
        }
    }
}

RDP Connection Settings

Access RDP-specific settings for Windows Remote Desktop connections:

Example.java

PamSettings pamSettings = data.getField(PamSettings.class);
if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
    PamSetting setting = pamSettings.getValue().get(0);

    if (setting.getConnection() != null && "rdp".equals(setting.getConnection().getProtocol())) {
        PamSettingsConnection conn = setting.getConnection();

        // Display settings
        System.out.println("Width: " + conn.getWidth());
        System.out.println("Height: " + conn.getHeight());
        System.out.println("DPI: " + conn.getDpi());
        System.out.println("Color Depth: " + conn.getColorDepth());

        // Remote application settings
        System.out.println("Initial Program: " + conn.getInitialProgram());
        System.out.println("Remote App: " + conn.getRemoteApp());
        System.out.println("Remote App Directory: " + conn.getRemoteAppDir());
        System.out.println("Remote App Arguments: " + conn.getRemoteAppArgs());

        // Audio settings
        System.out.println("Console Audio: " + conn.getConsoleAudio());
        System.out.println("Enable Audio Input: " + conn.getEnableAudioInput());

        // Client settings
        System.out.println("Client Name: " + conn.getClientName());
        System.out.println("Server Layout: " + conn.getServerLayout());

        // Feature toggles
        System.out.println("Enable Touch: " + conn.getEnableTouch());
        System.out.println("Enable Printing: " + conn.getEnablePrinting());
        System.out.println("Enable Theming: " + conn.getEnableTheming());
        System.out.println("Enable Font Smoothing: " + conn.getEnableFontSmoothing());

        // Caching settings
        System.out.println("Disable Bitmap Caching: " + conn.getDisableBitmapCaching());
        System.out.println("Disable Offscreen Caching: " + conn.getDisableOffscreenCaching());
        System.out.println("Disable Glyph Caching: " + conn.getDisableGlyphCaching());

        // Other settings
        System.out.println("Normalize Clipboard: " + conn.getNormalizeClipboard());
        System.out.println("Console Mode: " + conn.getConsole());
        System.out.println("Read Only: " + conn.getReadOnly());
    }
}

SSH/Terminal Connection Settings

Access SSH and terminal-specific settings:

Example.java

PamSettings pamSettings = data.getField(PamSettings.class);
if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
    PamSetting setting = pamSettings.getValue().get(0);

    if (setting.getConnection() != null && "ssh".equals(setting.getConnection().getProtocol())) {
        PamSettingsConnection conn = setting.getConnection();

        // Terminal display settings
        System.out.println("Font Name: " + conn.getFontName());
        System.out.println("Scrollback Buffer: " + conn.getScrollback());
        System.out.println("Terminal Type: " + conn.getTerminalType());

        // Input settings
        System.out.println("Backspace Key: " + conn.getBackspace());

        // Localization settings
        System.out.println("Clipboard Encoding: " + conn.getClipboardEncoding());
        System.out.println("Locale: " + conn.getLocale());
        System.out.println("Timezone: " + conn.getTimezone());

        // Connection settings
        System.out.println("Server Alive Interval: " + conn.getServerAliveInterval());
    }
}

VNC Connection Settings

Access VNC-specific settings for remote desktop control:

Example.java

PamSettings pamSettings = data.getField(PamSettings.class);
if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
    PamSetting setting = pamSettings.getValue().get(0);

    if (setting.getConnection() != null && "vnc".equals(setting.getConnection().getProtocol())) {
        PamSettingsConnection conn = setting.getConnection();

        // Audio settings
        System.out.println("Enable Audio: " + conn.getEnableAudio());
        System.out.println("Audio Server: " + conn.getAudioServername());

        // Display settings
        System.out.println("Swap Red/Blue: " + conn.getSwapRedBlue());
        System.out.println("Cursor Mode: " + conn.getCursor());
        System.out.println("Force Lossless: " + conn.getForceLossless());
    }
}

Kubernetes Connection Settings

Access Kubernetes-specific settings:

Example.java

PamSettings pamSettings = data.getField(PamSettings.class);
if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
    PamSetting setting = pamSettings.getValue().get(0);

    if (setting.getConnection() != null && "k8s".equals(setting.getConnection().getProtocol())) {
        PamSettingsConnection conn = setting.getConnection();

        // Connection settings
        System.out.println("Use SSL: " + conn.getUseSSL());
        System.out.println("Namespace: " + conn.getNamespace());
        System.out.println("Pod: " + conn.getPod());
        System.out.println("Container: " + conn.getContainer());

        // Certificate settings
        System.out.println("CA Certificate: " + conn.getCaCert());
        System.out.println("Client Certificate: " + conn.getClientCert());
        System.out.println("Client Key: " + conn.getClientKey());
    }
}

RBI Audio and Clipboard Controls

Access RBI (Remote Browser Isolation) settings for audio and clipboard management:

Example.java

import com.keepersecurity.secretsManager.core.*;

PamRemoteBrowserSettings rbiSettings = data.getField(PamRemoteBrowserSettings.class);
if (rbiSettings != null && !rbiSettings.getValue().isEmpty()) {
    PamRemoteBrowserSetting setting = rbiSettings.getValue().get(0);

    if (setting.getConnection() != null) {
        PamRbiConnection rbi = setting.getConnection();

        // Audio controls
        System.out.println("Disable Audio: " + rbi.getDisableAudio());
        System.out.println("Audio Channels: " + rbi.getAudioChannels());
        System.out.println("Audio BPS: " + rbi.getAudioBps());
        System.out.println("Audio Sample Rate: " + rbi.getAudioSampleRate());

        // Clipboard controls
        System.out.println("Disable Copy: " + rbi.getDisableCopy());
        System.out.println("Disable Paste: " + rbi.getDisablePaste());
    }
}

Port Forwarding Configuration

Access port forwarding settings with local port customization:

Example.java

PamSettings pamSettings = data.getField(PamSettings.class);
if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
    PamSetting setting = pamSettings.getValue().get(0);

    if (setting.getPortForward() != null) {
        PamSettingsPortForward portForward = setting.getPortForward();

        // Basic port forwarding
        System.out.println("Port: " + portForward.getPort());

        // Local port configuration
        System.out.println("Use Specified Local Port: " + portForward.getUseSpecifiedLocalPort());
        if (Boolean.TRUE.equals(portForward.getUseSpecifiedLocalPort())) {
            System.out.println("Local Port: " + portForward.getLocalPort());
        }
    }
}

Complete PAM Connection Example

PAMConnectionExample.java

import com.keepersecurity.secretsManager.core.*;

public class PAMConnectionExample {
    public static void main(String[] args) throws Exception {
        // Assume storage is already initialized
        SecretsManagerOptions options = new SecretsManagerOptions(storage);
        KeeperSecrets secrets = SecretsManager.getSecrets(options);

        for (KeeperRecord record : secrets.getRecords()) {
            KeeperRecordData data = record.getData();

            // Check if this is a PAM record with connection settings
            PamSettings pamSettings = data.getField(PamSettings.class);
            if (pamSettings != null && !pamSettings.getValue().isEmpty()) {
                PamSetting setting = pamSettings.getValue().get(0);

                // Access connection settings
                if (setting.getConnection() != null) {
                    PamSettingsConnection conn = setting.getConnection();
                    String protocol = conn.getProtocol();

                    System.out.println("\n=== PAM Connection: " + data.getTitle() + " ===");
                    System.out.println("Type: " + protocol);
                    System.out.println("Port: " + conn.getPort());

                    // Handle protocol-specific settings
                    switch (protocol != null ? protocol : "") {
                        case "rdp":
                            System.out.println("RDP Display: " + conn.getWidth() + "x" + conn.getHeight());
                            System.out.println("Color Depth: " + conn.getColorDepth() + " bit");
                            System.out.println("Audio Input Enabled: " + conn.getEnableAudioInput());
                            break;

                        case "ssh":
                            System.out.println("Terminal Type: " + conn.getTerminalType());
                            System.out.println("Font: " + conn.getFontName());
                            System.out.println("Locale: " + conn.getLocale());
                            break;

                        case "vnc":
                            System.out.println("Audio Enabled: " + conn.getEnableAudio());
                            System.out.println("Cursor Mode: " + conn.getCursor());
                            break;

                        case "k8s":
                            System.out.println("Namespace: " + conn.getNamespace());
                            System.out.println("Pod: " + conn.getPod());
                            System.out.println("Container: " + conn.getContainer());
                            break;
                    }
                }

                // Check for RBI settings
                PamRemoteBrowserSettings rbiSettings = data.getField(PamRemoteBrowserSettings.class);
                if (rbiSettings != null && !rbiSettings.getValue().isEmpty()) {
                    PamRemoteBrowserSetting rbiSetting = rbiSettings.getValue().get(0);
                    if (rbiSetting.getConnection() != null) {
                        PamRbiConnection rbi = rbiSetting.getConnection();
                        System.out.println("RBI Audio Disabled: " + rbi.getDisableAudio());
                        System.out.println("RBI Clipboard Copy Disabled: " + rbi.getDisableCopy());
                        System.out.println("RBI Clipboard Paste Disabled: " + rbi.getDisablePaste());
                    }
                }

                // Check for port forwarding
                if (setting.getPortForward() != null) {
                    PamSettingsPortForward pf = setting.getPortForward();
                    if (Boolean.TRUE.equals(pf.getUseSpecifiedLocalPort())) {
                        System.out.println("Local Port: " + pf.getLocalPort());
                    }
                }
            }
        }
    }
}

Protocol-Specific Field Availability

The PamSettingsConnection class contains fields for multiple protocols (RDP, SSH, VNC, Kubernetes). Only fields relevant to the record's connectionType will be populated.

Example:

• RDP records: width, height, colorDepth will have values

• SSH records: fontName, terminalType, locale will have values

• VNC records: enableAudio, cursor, swapRedBlue will have values

• K8s records: namespace, pod, container will have values

Always check for null before accessing protocol-specific fields:

if ("rdp".equals(conn.getProtocol())) {
    Integer width = conn.getWidth(); // Safe: RDP-specific field
}

Accessing SSH fields on an RDP record will return null.