Commit graph

22 commits

Author SHA1 Message Date
Alex Lyulkov 79389981b2 Updated backend initializaton and tctl commands 2015-09-29 01:04:10 +03:00
Alex Lyulkov 235dd89d33 Added replicated backend, but it needs more test 2015-09-12 04:19:20 +03:00
Alex Lyulkov c14f43de25 Updated mailgun/lemma/secret and gravitational/session 2015-09-06 17:54:34 +03:00
Alex Lyulkov 888c340f97 Moved from backend to services 2015-08-25 20:54:16 +03:00
klizhentas de738f6f37 fix connection leakage for ssh to tcp tunnel 2015-08-16 16:50:14 -07:00
klizhentas 294a49eee8 replace the logging to the package that we control 2015-08-05 12:16:39 -07:00
klizhentas 2d4375b0cb vendor dependencies 2015-08-02 21:57:31 -07:00
klizhentas 9da00a86cc Expand terminal to occupy the whole screen 2015-07-13 10:53:55 -07:00
klizhentas c9eaacb267 Playbacks work 2015-07-10 17:24:44 -07:00
klizhentas cdbeb15b25 messages and chats work 2015-07-09 14:38:50 -07:00
klizhentas 4d97d63413 download and upload works 2015-07-07 16:49:37 -07:00
klizhentas 68506006ca SCP is working 2015-07-04 18:58:59 -07:00
klizhentas 0fadb4a44f not too embarrasing 2015-07-02 17:16:44 -07:00
klizhentas 02f1ed9e75 clean it up a little bit 2015-06-30 10:50:15 -07:00
klizhentas 6216d7a27b shared sessions work somehow 2015-06-29 14:39:35 -07:00
klizhentas bbbc2a8002 add proof of concept terminal sharing 2015-06-28 19:44:07 -07:00
klizhentas f59223256c teleport connect and remote authorities
* teleport connect provides tunnel between local cluster and remote lens
* teleport can optionally trust remote authorities and allow signed keys in
2015-06-28 17:48:10 -07:00
klizhentas abbf7f58f9 Implement pure GO ssh CA authority and use it by default 2015-06-21 17:33:21 -07:00
klizhentas 12fdc19ff3 Provisioning and clear role separation
Distinct roles separation:

* Stateful auth server, it is stateful and exposes SSH
  authentication endpoint to the cluster
* Stateless ssh node, it connects to the auth server
  to authenticate access requests
* Stateless cp node, it provides web portal to access
  the cluster and update users keys

Provisioning:

* Auth server automatically sets itself up on the first start,
  no need to explicitly set encryption keys and authority certs

* SSH node connects to the Auth server to provision host private keys
  and sertificates using special SSH provisioning key issued by
  the auth server
2015-05-10 14:52:51 -07:00
Alexander Klizhentas 7d17f15271 Implement web proxying, and web SSH console proof of concept 2015-04-01 21:21:07 -07:00
Alexander Klizhentas 55de39d788 Vendor-in dependencies 2015-03-14 14:37:21 -07:00
Alexander Klizhentas 0c425d32d5 Initial working prototype 2015-03-14 14:35:43 -07:00