Port Mapping

Defining alternative ports in PAM Configurations

Overview

Rotation relies on the port field in resource records to determine its connection method.

For example, in a PAM Machine record, port 22 tells the gateway to use SSH, port 5985 for WinRM (http) and port 5986 for WinRM (https).

The expected standard ports are listed in the following table.

Rotation Standard Ports

Resource Type	Connection Type	Standard Port
PAM Machine	SSH	ssh=22
PAM Machine	WinRM	winrm=5986
PAM Directory	Active Directory	ldaps=636
PAM Directory	OpenLDAP	ldaps=636
PAM Database	Postgresql	postgresql=5432
PAM Database	MySQL	mysql=3306
PAM Database	MariaDB	mariadb=3306
PAM Database	Microsoft SQL	mssql=1433
PAM Database	Oracle	oracle=1521
PAM Database	MongoDB	mongodb=27017

Using Port Mappings

To use a non-standard port, specify the alternative port in two places:

• In the PAM Configuration port mapping field, enter {port}={connection}, for example, 32636=ldaps.

• For {connection}: refer to the labels under Standard Port in the standard ports table.

• In the PAM Machine/Directory/Database record, enter the chosen port in the port field

For example, to connect to a MySQL database using port 3307, your PAM Configuration should have 3307=mysql under port mapping, and your PAM Database record should reference port 3307.

Multiple port mappings are comma-separated in the PAM Configuration.