HTML5 SSH bookmark with configurable username and Netconf

[zzelle]

Using GUI, i can create a HTML5 SSH bookmark with empty username/password in order let clients set ssh username/password on bookmark connect.

Using Netconf, i fail to create HTML5 SSH bookmarks with empty username because username is set to <USER> if i create a bookmark :

• with an empty username:

<html5-access-profile operation='create'>
  <name>my-ssh-profile</name>
  <roles>my-role</roles>
  <hostname>10.10.10.10</hostname>
  <port>22</port>
  <html5-acl-checkbox>true</html5-acl-checkbox>
  <ssh>
    <sessions>
      <session>
        <name>my-ssh-bookmark</name>
        <username></username>
        <password-type>variable</password-type>
        <variable-password></variable-password>
      </session>
    </sessions>
  </ssh>
</html5-access-profile>

• without a username:

<html5-access-profile operation='create'>
  <name>my-ssh-profile</name>
  <roles>my-role</roles>
  <hostname>10.10.10.10</hostname>
  <port>22</port>
  <html5-acl-checkbox>true</html5-acl-checkbox>
  <ssh>
    <sessions>
      <session>
        <name>my-ssh-bookmark</name>
        <password-type>variable</password-type>
        <variable-password></variable-password>
      </session>
    </sessions>
  </ssh>
</html5-access-profile>

because <USER> is the default username value according to the xsd file.

Does anyone know which netconf xml i should use to force an empty username?

PS: i am using a Pulse Secure 8.2R5.1

[zanyterp]

I think that being able to save it in the UI without a username is an issue on the UI rather than correctly working behavior.
what is the error message you see on the admin console in both DMI scenarios?
I would recommend opening a case with our support team to have this investigated further.

Do you have a lab system you are able to test a supported version of the software as well?

[zzelle]

I hope it's not an issue to define HTML5 SSH bookmarks without a username otherwise there is a regression compared to "old fashioned" SSH bookmarks.

There is no error message as there is no error ... we just don't no how to force an empty password using Netconf API because username is set to <USER> when the markup <username> is empty

[zanyterp]

I believe it is a limitation of the HTML5 bookmark schema, yes. When you create an HTML5 SSH bookmark, which is required to be done through a resource profile, the initial bookmark does contain the username value <USER>. This can be deleted manually (thank you for letting me know this is possible in recent releases), yes, but the expectation with HTML5 SSH is that the username will be provided statically or via variable.

if this is something you would like to see changed, i would recommend working with your account team for an enhancement request.

[zzelle · Accepted solution]

After some experimentations, i find a solution to create a HTML5 SSH bookmark without a username through Netconf: i used the following as a username:

<username><![CDATA[]]></username>

Not sure, it works on all versions.

[zanyterp]

thank you for sharing; i am glad to see you found a way to allow this to meet your needs.