The new razor component supports proxy connection to RDP, and jumpserver fortress v2.23.0 is released

2022 year 6 month 20 Japan ,JumpServer Open source fortress machine officially released v2.23.0 edition . This version of JumpServer stay X-Pack The enhancement package has added Razor Components . This component supports proxy connection RDP Agreement assets , Replaced the JumpServer The original XRDP Components , Provide users with a smoother connection experience .

In the original XRDP On the basis of function ,Razor Component implements one-way control of uploading / download 、 Copy / Paste function ; When external display screen is connected ,Razor Components can be pulled up directly RemoteApp Remote applications ; Connecting assets or applications , And the experience of playing video ,Razor The connection experience provided by components is more smooth and smooth .

stay v2.23.0 In the version ,JumpServer It also supports the review of database commands （ adopt CLI and Web CLI Database connected by ）. meanwhile , stay Web Terminal On the page , New support for displaying authorized resources by organization .

in addition , In the open source version ,JumpServer New support OpenID Authentication settings user attribute mapping field , Users can customize the user attribute fields .

New function

1. newly added Razor Component supports proxy connection RDP（X-Pack Enhancement package ）

stay JumpServer v2.23.0 In the version , Newly added Razor Components . This component supports proxy connection RDP Agreement assets , Replaced the JumpServer The original XRDP Components , Native RDP The connection experience is fully upgraded .

In the original XRDP Based on component functions ,Razor Component in permission control , Realize one-way control upload / download 、 Copy / Paste function ; meanwhile , When external display screen is connected , It can be pulled up directly RemoteApp Remote applications , It solves the problem of external display screen in the old version , Can't pull up RemoteApp Problems with remote applications . in addition , Pull up the asset or application in the connection , And the experience of playing videos , With the help of Razor Components , Users can get a smoother and smoother experience .

▲  chart 1  When external display screen is connected ,Razor Components can be pulled up directly RDP Client connection RemoteApp application , for example MySQL WorkBench application 

▲  chart 2  One way open download file permission ,Razor When pulling up an asset or application , You can only download files , Can't upload file 

Comparison diagram Razor vs XRDP

▲  Comparison diagram ： With the help of Razor Components and XRDP Component plays video files ,Razor The playback experience of components is more smooth 

2. It supports the review of database commands （X-Pack Enhancement package ）

stay JumpServer v2.23.0 In the version , New support for rechecking database commands （ adopt CLI and Web CLI Database connected by ）.

The administrator selects “ Asset management ”→“ Command filtering ”, You can create rules for database command review , And set the approver . Authorized users connect to the database （ Use CLI or Web CLI How to connect ） after , Enter this command to review the command in the rule , You will be prompted that the command requires work order approval information . The approver agrees with the work order , The command is executed successfully ; conversely , The approver rejects the work order , The command execution failed .

▲  chart 3  Create database command review rules 

▲  chart 4  The user executes the command in the command review rule , Prompt for work order approval and other information 

▲  chart 5  The approver rejects the work order , The user is forbidden to execute the command 

3. Web Terminal The page supports displaying authorized resources by organization （X-Pack Enhancement package ）

stay JumpServer v2.23.0 In the version ,Web Terminal The new page supports the display of authorized resources by organization . When users have authorization resources under multiple organizations , stay Web Terminal On the page , You can switch organizations to obtain the authorized resources of the organization .

▲  chart 6  stay Web Terminal On the page , You can switch organizations to obtain the authorized resources of the organization 

4. New support OpenID Authentication settings user attribute mapping field

stay JumpServer v2.23.0 In the version , New support OpenID Authentication settings user attribute mapping field . The administrator selects “ System settings ”→“ Authentication settings ”→“OIDC”, User attribute mapping fields can be customized , The implementation will OpenID User attributes in are mapped to JumpServer Operations on the user .

notes ： If the attribute filled in by the user does not exist , Will use OpenID In the user's ID Mapping as attributes .

▲  chart 7  Administrator in OIDC On the settings page , User attribute mapping fields can be customized 

Function optimization

■ Optimize Luna page ⾯ Access the asset display ⽰Loading Animation ;

■ Optimize the clone angle ⾊ Permission contains permission bits ;

■ Add configuration item

CONNECTION_TOKEN_EXPIRATION Control connection Token The expiration time of , Default ⾄ Less 5 minute ;

■ Optimize RBAC Module's database migration logic , Increase upgrade speed ;

■ Optimize JumpServer Client edition v1.1.6,⽀ a ARM framework ;

■ Optimize authorization rule expiration notification ⽂ case ;

■ Optimize the system ⽤ Household 、 Password field of password change task , No ⽀ Continuous infusion ⼊ Single and double quotation marks ;

■ Optimization command filter details page ⾯, Add quick choices ⽤ Household 、⽤ Household group 、 Should be ⽤ And so on ;

■ Optimize the management page ⾯ The technical ⽀ Hold the menu , Provide “⼯ With download ” link ;

■ Optimize OpenID⽤ Default mail suffix when user logs in ⽤ Configuration item ;

■ Optimize ⽂ Files uploaded successfully ⽰ Information （Lion Components ）;

■ Optimization command record ⽂ Character record garbled code problem （Lion Components ）;

■ Optimize Web Terminal display ⽰ most ⼤ rolling ⾏ Count , from 1000 The row is promoted to 5000⾏（KoKo Components ）;

■ Optimize ⽀ a MySQL 8.0 Version database （Magnus Components ）;

■ Optimize login for session logging IP Address problem , Remove the record port number （Magnus Components ）;

■ Optimize ⽀ a PostgreSQL SCRAM authentication （Magnus Components ）（X-Pack Enhancement package ）.

Bug Repair

■ Repair ⽤ The user reset password address is incorrect ;

■ Repair get login IP The city is not accurate ;

■ The repair bulletin settings are not displayed ⽰ The problem of ;

■ Repair LDAP⽤ User attribute mapping is configured ⽤ The user group field results in ⽤ The problem of user login failure ;

■ Fix push dynamic ⽤ Household time Comment The problem that contains spaces that cause push failure ;

■ Fix the problem that fuzzy search in the command list results in errors ;

■ Repair list ⾃ Return to the page again when defining the search ⾯ display ⽰True The problem of ;

■ Repair ⽤ Household ⾸ Secondary landing page ⾯ After submission , Will cancel the third ⽅ The problem of binding accounts ;

■ Repair OmniDB Components occupy ⽤CPU Resources are too ⾼ The problem of , Effectively improve users' connection and performance （X-Pack Enhancement package ）;

■ Repair ⼿ Dynamic login system ⽤ User connection RemoteApp Should be ⽤ The login fails because the authentication information cannot be obtained （X-Pack Enhancement package ）.