Managerial Approval for User Connections to HTTP/HTTPS Devices

to enable managerial approval requests via email or mobile notification for users connecting to devices, the required managerial approval property must be set as true on the device group that includes the target devices during the first login to webpages that require managerial approval for the connection, an approval request email and a notification message are sent to the manager if the manager approves it, the request is valid by default for 3600 seconds logging into the same webpage within this period does not require another approval once this period (3600 seconds by default) has passed, a new approval email and notification message are sent to the manager this duration can be set by editing the http proxy managerial approval cache seconds parameter in the http proxy configuration file in addition, the messages displayed when users enter webpages requiring managerial approval can be edited by changing/entering the property values in the http proxy configuration file the default settings are used when no changes are made the table below lists the available values the parameters that can be configured for http proxy can be defined in the http proxy configuration file by following these steps establish an ssh connection to the kron pam server with pamuser sudo vi /u01/http proxy/conf/http proxy properties edit/add the related parameter save the file and exit the vi editor restart the http proxy using the command sudo systemctl restart pam http parameter name description http proxy approval rejected message the message is sent to the user if the manager rejects the request http proxy approval required message the message indicates that managerial approval is required to access the specific webpage http proxy waiting manager message the message is displayed when managerial approval is pending