Connect to SSH Servers
Last modified on August 17, 2022
There are three different ways to connect to SSH servers with strongDM:
- Use the CLI
- Connect with
sshas an alias for
- Connect directly with
sshusing the mapped port.
Use the sdm Binary
You can connect to any accessible server simply by using
sdm ssh <servername>. This command will also attempt to complete
<servername>—as long as you use a unique substring of a valid server.
$ sdm status DATASOURCE NAME STATUS PORT TYPE Customer DB RO not connected 5432 postgres Document DB not connected 27017 mongo SSH SERVER STATUS PORT TYPE bastion01 not connected 60672 ssh deployment04 not connected 60834 ssh $ sdm ssh bas Welcome to Ubuntu 16.04.2 LTS (GNU/Linux 4.4.0-1026-aws x86_64) Last login: Thu Jun 14 16:12:48 2018 from 127.0.0.1 ubuntu@bastion01:~$
Make an alias
The easiest way to use SSH with SDM is to add the SDM aliases to your shell profile.
sdm ssh aliasto get the required aliases; they will map
scpto use the SDM binary.
sdm ssh alias # Run this in the command line, or add the following to $HOME/.bashrc alias ssh="/usr/local/bin/sdm ssh wrapped-run" alias scp="scp -S'/usr/local/bin/sdm' -osdmSCP"
Run the resulting lines on the prompt and/or add them to
$HOME/.bashrcor the equivalent for your shell.
Start a new shell and test by connecting to an SSH server:
This will not interrupt anything you have defined via straight SSH. It will first check SDM, and if nothing exists, default to your standard path.
Use the Mapped Port
Just like connecting to databases, you can connect directly to the mapped server ports using
- Open a connection to the server by clicking on its name in the UI, or by typing
sdm connect <servername>
- Note the port assigned to the server in the UI or listed under
ssh localhost -p port
Windows 10 and 11 come with OpenSSH installed by default, but the executable is not where
sdm looks for it by default. In order to use
sdm ssh commands, you must copy
If you have trouble connecting to servers via SSH, please contact firstname.lastname@example.org with details.