PAM Launch Command

Launch a CLI-based KeeperPAM privileged session. This allows developers to use their preferred native terminal for connecting to a target. When "pam launch" is used, the session activity is recorded

Launch command

Runs PAM launch preflight: resolves the resource, protocol, PAM configuration, launch credential, target host/port, and gateway (including online/offline status), then prints a summary.

DotNet CLI

Command: pam-launch

Alias: pam-l

Parameters:

Parameter	Description
<record> (positional)	PAM resource UID or title
--credential / --cr	Launch credential (pamUser) UID or title (requires allow-supply flags on the record)
--gateway, -g	Gateway UID or name override
--host, -H	Custom host override as host:port (mutually exclusive with --host-record; requires allowSupplyHost)
--host-record / --hr	Record UID/title whose host / pamHostname field supplies the target host
--debug	Print resolve diagnostics

*Note*: Fully not implemented yet.

Examples:

My Vault> pam-launch <RESOURCE_UID>

PAM launch
----------
Record UID: <UID>
Record type: pamMachine
Protocol: ssh
Configuration UID: <CONFIG_UID>
Target host: 10.0.0.12:22 (record)
Launch credential: <UID> (<title>)
Gateway: <GATEWAY_UID> (<name>)
Gateway status: Online

Interactive terminal session is not available yet in this Commander build.

DotNet SDK

Function:

using KeeperSecurity.Plugins.PAM;

var prepare = await LaunchUtils.PrepareAsync(vault, new PamLaunchOptions
{
    Record = "<RESOURCE_UID>",
    Credential = "<PAM_USER_UID>",   // optional
    Gateway = "<GATEWAY_UID>",       // optional
    Host = null,                     // or "host:port" (not with HostRecord)
    HostRecord = null,               // optional host source record
    Debug = false
    // AvailableControllers: optional list when resolving gateway by name
});

Console.WriteLine($"Record: {prepare.Record?.Uid} ({prepare.Record?.TypeName})");
Console.WriteLine($"Protocol: {prepare.Protocol}");
Console.WriteLine($"Config: {prepare.ConfigUid}");
Console.WriteLine($"Host: {prepare.Host}:{prepare.Port} ({prepare.HostSource})");
Console.WriteLine($"Credential: {prepare.LaunchCredential?.Uid}");
Console.WriteLine($"Gateway: {prepare.GatewayUid} online={prepare.GatewayOnline}");

Power Commander

Command: Invoke-KeeperPamLaunch

Alias: pam-launch

Parameters:

Parameter	Description
-Record / -r	PAM resource UID or title (positional)
-Credential / -cr	Launch credential (pamUser) UID or title(requires allow-supply flags on the record)
-Gateway / -g	Gateway UID or name override
-Host / -H	Custom host override as host:port (mutually exclusive with --host-record; requires allowSupplyHost)
-HostRecord / -hr	Record UID/title whose host / pamHostname field supplies the target host
-Debug	Print pam-launch resolve diagnostics

Note: Fully not implemented yet.

Examples:

PS > Invoke-KeeperPamLaunch -Record "<pamMachine-uid-or-title>"
PS > pam-launch -r "<uid>" -Credential "<pamUser>" -Gateway "<gateway-uid>"
PS > pam-launch -r "<uid>" -Host "10.0.0.5:22"
PS > pam-launch -r "<uid>" -HostRecord "<host-record-uid>" -Debug

Python CLI

Command: Coming Soon

Python SDK

Command: Coming Soon