Перейти к основному контенту

Changing the lifetime and reusability of connection tokens in JumpServer

In JumpServer, you can connect to target systems using the web interface or a local client such as PuTTY, MobaXterm, DBeaver, and others, depending on the connection type.
To connect using a local client, you need to use one-time authorization parameters that JumpServer generates when selecting the “SSH Guide”, “DB Guide”, etc.

By default, the connection parameters are single-use and have a lifetime of 5 minutes, meaning that you must request new parameters each time you reconnect.
In some cases, it may be necessary to increase the lifetime of the connection parameters and/or allow their reuse.

2c1ZgakA63R0kz7Z-izobrazenie.png

Open the configuration file:

nano /opt/jumpserver/config/config.txt

Add the required lines with the appropriate values:

CONNECTION_TOKEN_REUSABLE=true        # enable reuse of authorization parameters
CONNECTION_TOKEN_REUSABLE_EXPIRATION=86400  # lifetime of authorization parameters in seconds

Then restart JumpServer:

jmsctl restart

After that, when requesting new connection parameters, you will see the “Set reusable” switch and notice that the lifetime of the authorization parameters has increased (see screenshot).