PostgreSQL Connections

Keeper Connections - PostgreSQL Protocol

Overview

KeeperPAM enables zero-trust privileged session management for PostgreSQL databases through an interactive CLI. This guide shows how to configure PostgreSQL connections on your PAM Database Records in the Keeper Vault. Sessions are securely initiated from the Vault, routed via the Keeper Gateway, and connected to target databases.

Prerequisites

Prior to following this guide, familiarize yourself with the prerequisites on the Connection's Getting Started page.

The following PAM records are needed in order to successfully setup this protocol:

PAM Record
Definition

PAM Configuration

The PAM Configuration contains information of your target infrastructure

PAM Database Record

The PAM Database record contains information of the endpoint you want to establish an PostgreSQL protocol connection to.

PAM User Record

The PAM User record contains the PostgreSQL user credentials that will be used to connect to the endpoint

This guide will use a PostgreSQL Database. For more details on how this is setup, visit the following page:

PAM Settings - PostgreSQL Protocol

Accessing Connection Settings

After creating a PAM Record Type (PAM Machine, PAM Database, or PAM Directory) with your target endpoint, navigate to the Connection Section on the PAM Settings screen by:

  1. Editing the PAM Record

  2. Clicking on "Set Up" in the PAM Settings section

  3. Navigate to the "Connection" section in the prompted window

Configuring Connection Settings

Prior to configuring the PostgreSQL protocol settings on the PAM Settings screen, the following fields are all required and need to be configured:

The following table lists all the configurable connection settings for the SQL Server protocol on the PAM Settings:

Field
Definition

Protocol

Required

The protocol to be configured on the record. The protocol settings will be populated based on the selected protocol. In this guide, the PostgreSQL protocol should be selected

Enable Connection

Required

To enable connection for this record, this toggle needs to be enabled

Graphical Session Recording

When enabled, graphical session recordings will be enabled for this record

Text Session Recording (Typescript)

When enabled, text session recordings (typescript) will be enabled for this record

Connection Port

The port used to establish the selected protocol connection. By Default, this will be the port value defined on the PAM Database. The port specified here will override the default port. For PostgreSQL, the port is 5432

Default Database

The database schema selected when connecting to the specified database server.

Can export CSV

Disables CSV export of data when using the SQL statement \COPY

FROM "input.csv" With CSV

Can import CSV

Disables CSV import of data when using the SQL statement \COPY () TO ".csv" With CSV HEADER

Can copy to clipboard

If enabled, text copied within the connected protocol session will be accessible by the user

Can paste from clipboard

If enabled, user can paste text from local clipboard into the connected protocol session

Insert Configured PAM Settings Pic

Session Recordings - PostgreSQL Protocol

Last updated

Was this helpful?