3.5. Using other clients

3.5.1. Starting a server command automatically

It is possible to connect to an AppGate server with a normal SSH2 client (such as openssh). Not all of the AppGate features are available when doing this, but it may still be the best solution in some circumstances. There is no graphical user interface when connecting with a standard SSH client. Instead, the AppGate server will present a text interface to the user. First, if needed, the user must select role, and then a menu of available components is shown.

It is possible to enable and disable IP access services by entering their names. It is also possible to start a server command by entering its name. But it is only possible to run one server command per session. It is possible to get more information about port numbers and such in IP access components by giving the command info.

All authentication methods except 'certificate' should work with command-line clients. Roaming will not work. It is only possible to use IP access components and one server command. It is possible to have multiple server commands available but only one can be started per session. Once a server command has been started, it takes over the entire session and the session will be closed when the server command exits.

3.5.1. Starting a server command automatically

It is possible to start a server command automatically when the user logs in. To do this, issue the following command (assuming the client is openssh):

ssh appgate_server -t -l username role_number:command_name

Only specify role_number if the user must select a role when logging in. Otherwise, leave it blank (but keep the :). The -l username can be skipped if the local username matches the username on the AppGate server. The -t parameter forces the client to create a pseudo terminal which makes the remote program realize that it is being run interactively.

It is not possible to enable IP access services with this method, but they are started automatically if the service containing them is marked for autostart. It is always possible to use a tool such as expect (see http://expect.nist.gov/) if more advanced interaction is needed.