61822a6b11
* perf: auth cert add settings
* perf: add config for cert
* feat: add auth cert ca cert/key upload supported
* fix: Change lang failed (#16861)
Co-authored-by: wangruidong <940853815@qq.com>
* fix: third part user login many login logs
* fix: i18n cert to ukey
* fix: cert algo default -
* fix: cert logo to ukey
* fix: cert auth to ukey auth
* fix: wecom scan login only exist user login, but two login success
* fix: django5 for model.field through_fields apply to migrations
* fix: from apps. change to appname imported
* fix: LDAP user login exception
* feat: hsm sctu
* fix(static): remove invalid sourcemap references from vendor js
* fix:add ansible patchs to osm (#16886)
* fix:add ansible patchs to osm
* fix: quote ansible gateway proxy command args
---------
Co-authored-by: Crane.z <1481445951@qq.com>
* feat: support ukey
* perf: auth ukey config interval time 5s
* perf: add ukey_sn unique and unbind devSN operation
* perf: profile not display ukey for other user
* perf: i18n ukey
* perf: ukey change pin support validate length
* perf: ukey settings default pin length
* perf: 512 to 256 rounds 1000
* perf: update gmssl builder
* perf: ukey auth security
* perf: ukey challenge ttl check
* feat: hsm
* fix(accounts): support new gateway proxy layout in ssh ping (#16895)
Co-authored-by: Crane.z <1481445951@qq.com>
* fix: ukey api urls open
* fix: jida ukey show certAlg
* perf: update change role name
* perf: gmssl_python add copyright notice
* feat:upgrade ansible version
* fix: update user empty ukey_sn field value
* fix: ukey auth user invalid alert error
* perf: use prebuild gmssl image
* fix: do not view change-secret by settings
* perf: update last login
* fix: do not view change-secret by settings
* perf: support applet host filter
* fix: ukey login user deactive error no tips
* fix: add translate
* perf: Logout countdown
* fix: sys-site-msg support revoke
* perf: remove video player download
* perf: change lang trans
* perf: update config after migrate
* perf: translate
* perf: update migrate
* perf: update site url
* perf: translate
* fix: flash msg page redirect_url safe check
* fix: playbook clone_from check playbook scope
* fix: profile password patch method not allowed
* perf: translate
* perf: to tcpdump
* perf: traceroute
* perf: remove debug
* Revert "perf: to tcpdump"
This reverts commit 1413d57bfd.
* perf: import asset add error check
* perf: translate
* perf: translate
* perf: user login filter filter_long_time
* perf: push account
* perf: account history
* perf: translate
* perf: add client unsupport tips
* perf: update download
* perf: add mongo utils
* fix: storage translate
* perf: es error
* perf: use mongo ping
* perf: indentation
* perf: translate
* fix: Platform error translate (#16947)
* fix: Import prompts a interal error when the label is too long
* fix: Platform error translate
---------
Co-authored-by: wangruidong <940853815@qq.com>
* perf: update i18n
* perf: ansible forks to 20
* perf: BULK_SIZE to 80
* perf: hcp vault jumpserver change pam
* perf: add update user password script
* perf: add change user password pt
* perf: ru translate
---------
Co-authored-by: fit2bot <68588906+fit2bot@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: xiaoc <648844981@qq.com>
Co-authored-by: Aaron3S <chenyang@fit2cloud.com>
Co-authored-by: Crane.z <1481445951@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: Eric <xplzv@126.com>
Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
An open-source PAM platform (Bastion Host)
English · 中文(简体) · 中文(繁體) · 日本語 · Português (Brasil) · Español · Русский · 한국어
What is JumpServer?
JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser.
Quickstart
Prepare a clean Linux Server ( 64 bit, >= 4c8g )
curl -sSL https://github.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash
Access JumpServer in your browser at http://your-jumpserver-ip/
- Username:
admin - Password:
ChangeMe
Screenshots
Components
JumpServer consists of multiple key components, which collectively form the functional framework of JumpServer, providing users with comprehensive capabilities for operations management and security control.
| Project | Status | Description |
|---|---|---|
| Lina |  |
JumpServer Web UI |
| Luna |  |
JumpServer Web Terminal |
| KoKo |  |
JumpServer Character Protocol Connector |
| Lion |  |
JumpServer Graphical Protocol Connector |
| Chen |  |
JumpServer Web DB |
| Client |  |
JumpServer Client |
| Tinker |  |
JumpServer Remote Application Connector (Windows) |
| Panda | |
JumpServer EE Remote Application Connector (Linux) |
| Razor | |
JumpServer EE RDP Proxy Connector |
| Magnus | |
JumpServer EE Database Proxy Connector |
| Nec | |
JumpServer EE VNC Proxy Connector |
| Facelive | |
JumpServer EE Facial Recognition |
Third-party projects
- jumpserver-grafana-dashboard JumpServer with grafana dashboard
Contributing
Welcome to submit PR to contribute. Please refer to CONTRIBUTING.md for guidelines.
License
Copyright (c) 2014-2026 FIT2CLOUD, All rights reserved.
Licensed under The GNU General Public License version 3 (GPLv3) (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
https://www.gnu.org/licenses/gpl-3.0.html
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an " AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.