JumpServer 是广受欢迎的开源堡垒机,是符合 4A 规范的专业运维安全审计系统。
Go to file
fit2bot 3f4141ca0b
merge: with pam (#14911)
* perf: change i18n

* perf: pam

* perf: change translate

* perf: add check account

* perf: add date field

* perf: add account filter

* perf: remove some js

* perf: add account status action

* perf: update pam

* perf: 修改 discover account

* perf: update filter

* perf: update gathered account

* perf: 修改账号同步

* perf: squash migrations

* perf: update pam

* perf: change i18n

* perf: update account risk

* perf: 更新风险发现

* perf: remove css

* perf: Admin connection token

* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks

* perf: Modify account migration files

* perf: update pam

* perf: remove to check account dir

* perf: Admin connection token

* perf: update check account

* perf: 优化发送结果

* perf: update pam

* perf: update bulk update create

* perf: prepaire using thread timer for bulk_create_decorator

* perf: update bulk create decorator

* perf: 优化 playbook manager

* perf: 优化收集账号的报表

* perf: Update poetry

* perf: Update Dockerfile with new base image tag

* fix: Account migrate 0012 file

* perf: 修改备份

* perf: update pam

* fix: Expand resource_type filter to include raw type

* feat: PAM Service (#14552)

* feat: PAM Service

* perf: import package name

---------

Co-authored-by: jiangweidong <1053570670@qq.com>

* perf: Change secret dashboard (#14551)

Co-authored-by: feng <1304903146@qq.com>

* perf: update migrations

* perf: 修改支持 pam

* perf: Change secret record table dashboard

* perf: update status

* fix: Automation send report

* perf: Change secret report

* feat: windows accounts gather

* perf: update change status

* perf: Account backup

* perf: Account backup report

* perf: Account migrate

* perf: update service to application

* perf: update migrations

* perf: update logo

* feat: oracle accounts gather (#14571)

* feat: oracle accounts gather

* feat: sqlserver accounts gather

* feat: postgresql accounts gather

* feat: mysql accounts gather

---------

Co-authored-by: wangruidong <940853815@qq.com>

* feat: mongodb accounts gather

* perf: Change secret

* perf: Migrate

* perf: Merge conflicting migration files

* perf: Change secret

* perf: Automation filter org

* perf: Account push

* perf: Random secret string

* perf: Enhance SQL query and update risk handling in accounts

* perf: Ticket filter assignee_id

* perf: 修改 account remote

* perf: 修改一些 adhoc 任务

* perf: Change secret

* perf: Remove push account extra api

* perf: update status

* perf: The entire organization can view activity log

* fix: risk field check

* perf: add account details api

* perf: add demo mode

* perf: Delete gather_account

* perf: Perfect solution to account version problem

* perf: Update status action to handle multiple accounts

* perf: Add GatherAccountDetailField and update serializers

* perf: Display account history in combination with password change records

* perf: Lina translate

* fix: Update mysql_filter to handle nested user info

* perf: Admin connection token validate_permission account

* perf: copy move account

* perf: account filter risk

* perf: account risk filter

* perf: Copy move account failed message

* fix: gather account sync account to asset

* perf: Pam dashboard

* perf: Account dashboard total accounts

* perf: Pam dashboard

* perf: Change secret filter account secret_reset

* perf: 修改 risk filter

* perf: pam translate

* feat: Check for leaked duplicate passwords. (#14711)

* feat: Check for leaked duplicate passwords.

* perf: Use SQLite instead of txt as leak password database

---------

Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: 老广 <ibuler@qq.com>

* perf: merge with remote

* perf: Add risk change_password_add handle

* perf: Pam dashboard

* perf: check account manager import

* perf: 重构扫描

* perf: 修改 db

* perf: Gather account manager

* perf: update change db lib

* perf: dashboard

* perf: Account gather

* perf: 修改 asset get queryset

* perf: automation report

* perf: Pam account

* perf: Pam dashboard api

* perf: risk add account

* perf: 修改 risk check

* perf: Risk account

* perf: update risk add reopen action

* perf: add pylintrc

* Revert "perf: automation report"

This reverts commit 22aee54207.

* perf: check account engine

* perf: Perf: Optimism Gather Report Style

* Perf: Remove unuser actions

* Perf: Perf push account

* perf: perf gather account

* perf: Automation report

* perf: Push account recorder

* perf: Push account record

* perf: Pam dashboard

* perf: perf

* perf: update intergration

* perf: integrations application detail add account tab page

* feat: Custom change password supports configuration of interactive items

* perf: Go and Python demo code

* perf: Custom secret change

* perf: add user filter

* perf: translate

* perf: Add demo code docs

* perf: update some i18n

* perf: update some i18n

* perf: Add Java, Node, Go, and cURL demo code

* perf: Translate

* perf: Change secret translate

* perf: Translate

* perf: update some i18n

* perf: translate

* perf: Ansible playbook

* perf: update some choice

* perf: update some choice

* perf: update account serializer remote unused code

* perf: conflict

* perf: update import

---------

Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
2025-02-21 16:39:57 +08:00
.github perf: add workflows auto release docs 2024-12-06 10:20:24 +08:00
apps merge: with pam (#14911) 2025-02-21 16:39:57 +08:00
data perf: remove old warning msg 2022-09-21 14:02:47 +08:00
docs docs: redirect to doc site 2022-09-21 14:04:16 +08:00
readmes Update README.zh-hant.md 2024-12-05 14:49:42 +08:00
requirements perf: Upgrade ansible postgresql 2024-09-12 18:55:01 +08:00
tmp chore: keep dir git 2022-09-21 14:17:38 +08:00
ui perf: upgrade to v4, more international and more standardized. 2024-07-04 10:06:43 +08:00
utils perf: Script to Add a Non-existent release_assets Field (#14558) 2024-12-02 16:51:52 +08:00
.dockerignore perf: upgrade to v4, more international and more standardized. 2024-07-04 10:06:43 +08:00
.gitattributes merge: with pam (#14911) 2025-02-21 16:39:57 +08:00
.gitignore feat: add gitignore 2025-01-09 10:50:57 +08:00
.isort.cfg perf: upgrade to v4, more international and more standardized. 2024-07-04 10:06:43 +08:00
.pylintrc merge: with pam (#14911) 2025-02-21 16:39:57 +08:00
CODE_OF_CONDUCT.md chore: add code of conduct 2022-09-21 14:06:46 +08:00
config_example.yml feat: 增加人脸识别功能 2024-11-12 17:41:39 +08:00
CONTRIBUTING.md chore: use unseq list 2024-07-03 15:35:14 +08:00
Dockerfile perf: Update Dockerfile with new base image tag 2024-12-10 15:25:37 +08:00
Dockerfile-base perf: add to cron.d (#14375) 2024-10-29 16:15:07 +08:00
Dockerfile-ee perf: using poetry mirror 2024-10-29 15:18:24 +08:00
entrypoint.sh perf: add cron (#14364) 2024-10-29 10:56:42 +08:00
jms perf: display migrate log 2024-07-31 15:09:33 +08:00
LICENSE chore: upgrade GPL to v3 2022-09-21 14:24:25 +08:00
poetry.lock merge: with pam (#14911) 2025-02-21 16:39:57 +08:00
pyproject.toml merge: with pam (#14911) 2025-02-21 16:39:57 +08:00
README.md chore: update readme 2024-12-30 16:04:32 +08:00
README.zh-CN.md perf: update readme 2024-11-22 16:43:44 +08:00
SECURITY.md chore: add english version secrity info 2022-09-21 14:25:07 +08:00

JumpServer

An open-source PAM tool (Bastion Host)

English · 中文(简体) · 中文(繁體) · 日本語 · Português (Brasil)


What is JumpServer?

JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser.

JumpServer Overview

Quickstart

Prepare a clean Linux Server ( 64 bit, >= 4c8g )

curl -sSL https://github.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash

Access JumpServer in your browser at http://your-jumpserver-ip/

  • Username: admin
  • Password: ChangeMe

JumpServer Quickstart

Screenshots

JumpServer Console JumpServer Audits
JumpServer Workbench JumpServer Settings
JumpServer SSH JumpServer RDP
JumpServer K8s JumpServer DB

Components

JumpServer consists of multiple key components, which collectively form the functional framework of JumpServer, providing users with comprehensive capabilities for operations management and security control.

Project Status Description
Lina Lina release JumpServer Web UI
Luna Luna release JumpServer Web Terminal
KoKo Koko release JumpServer Character Protocol Connector
Lion Lion release JumpServer Graphical Protocol Connector
Chen Chen release JumpServer Web DB
Razor Chen JumpServer EE RDP Proxy Connector
Tinker Tinker JumpServer EE Remote Application Connector (Windows)
Panda Panda JumpServer EE Remote Application Connector (Linux)
Magnus Magnus JumpServer EE Database Proxy Connector
Nec Nec JumpServer EE VNC Proxy Connector
Facelive Facelive JumpServer EE Facial Recognition

Contributing

Welcome to submit PR to contribute. Please refer to CONTRIBUTING.md for guidelines.

Security

JumpServer is a mission critical product. Please refer to the Basic Security Recommendations for installation and deployment. If you encounter any security-related issues, please contact us directly:

License

Copyright (c) 2014-2025 FIT2CLOUD, All rights reserved.

Licensed under The GNU General Public License version 3 (GPLv3) (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

https://www.gnu.org/licenses/gpl-3.0.html

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an " AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.