Jumpserver stepping stone

I,Jumpserver Introduction

Umpserver is an open-source stepping stone (bastion host) system compiled by python, which implements the functions of the stepping stone. It is managed based on the SSH protocol, and the agent does not need to be installed on the client.

Ii. features:

It is fully open-source and compiled in Python. It is easy to re-develop and implement the basic functions of the stepping stone. It authenticates, authorizes, audits, and integrates ansible, batch Commands, automatic collection of hard information, video playback, command search, real-time monitoring, batch upload and download, etc.

Iii. establishment and deployment of jumpserver

1. Download Yum Source

Attach a CD:

[[Email protected] ~] # Mount/dev/sr0/Media/CDROM/
Mount: block device/dev/sr0 is write-protected, mounting read-only

Installation and download commands:

[[Email protected] yum. Repos. d] # Yum-y install wget

Download the Internet Yum Source:

[[Email protected] yum. Repos. d] # wget-O/etc/yum. Repos. d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo

Http://mirrors.aliyun.com/repo/epel-6.repo wget-O/etc/yum. Repos. d/epel. Repo

Regenerate Yum cache:

[[Email protected] yum. Repos. d] # Yum-y clean all-> clear Cache

[[Email protected] yum. Repos. d] # Yum makecache-> regenerate Cache

 

2. Copy the source code package to the jumpserver and unpack the package.

[[Email protected] ~] # Tar xf jumpserver-0.3.2.tar.gz-C/usr/local/-> unzip
[[Email protected] ~] # Cd/usr/local/jumpserver-0.3.2/
[[Email protected] jumpserver-0.3.2] # pwd
/Usr/local/jumpserver-0.3.2

3. Run the automatic installation script provided by jumpserver.

[[Email protected] jumpserver-0.3.2] # cd install/
[[Email protected] install] # Python install. py-> Use python to parse and install

 

Test access through a browser:

[[Email protected] install] # netstat-antup | grep 8000-> View the listening port

 

4. jumpserver stepping stone

 

A user has been created. This information must be saved.

Download key

 

 

Sudo authorization

 

Sudo principle:

 

Add asset

 

 

Add system users

 

Managed end:

[[Email protected] install] # useradd Admin & Echo "111111" | passwd -- stdin Admin

 

 

Push Resources

 

 

Add authorization rules

 

Xshell Login

 

 

 

 

 

 

 

 

 

 

 

Jumpserver stepping stone