aker-gateway / Aker

SSH bastion/jump host/jumpserver
Other
566 stars 81 forks source link

Permit change user in aker #72

Open Dryusdan opened 6 years ago

Dryusdan commented 6 years ago

Hello Okay, this title is just horrible 😅. I have question, Is that what it's planned to permit change username in aker ? For example I connect on aker with username dryusdan, and distant server require username "admin". (I know, is very ugly). Or hardcore username admin on json file (for exemple)

:)

anazmy commented 6 years ago

Well, while its technically possible and I can think of some use cases, like for example DBAs accessing DB servers as user oracle for example, still I think its bad security practice IMHO, better follow sudo path for such approach.

Dryusdan commented 6 years ago

I entirely agree with you it's a very bad practice, but it's a constraint so, I ask ^^

Dryusdan commented 6 years ago

Question (I try yo make modification), on line 77 in SSHClient.py, where is defined the user variable ? Because when I change it to "root" (bad I know 😛 ) or "admin", the user connect with it's own private key but with root account (I know, it's a big garbage ) ^^

anazmy commented 6 years ago

That would be lines 86 and 91 but that will not work if you have more than one user. I recommend trying the sudo route, its a default linux tool with well established practices.

Dryusdan commented 6 years ago

Okay, thank you :) (sudo root 🤔 hum, I make some research :) )

kvaps commented 5 years ago

@anazmy I have use case for organize access to a lots of simple devices which support ssh but have no opportunity to install ipa-agent and any software there.