JumpServer PAM » Documentation » Administrating » How to connect to domain assets using a single domain account?

How to connect to domain assets using a single domain account?

In previous versions of JumpServer, a user account (UA) was strictly bound to a specific asset, meaning it was not possible to connect to multiple assets using the same domain account without duplicating that account.
In the latest versions of JumpServer, this capability has been added:

Go to Console → Assets → Directory Service and create a directory service asset by specifying the domain parameters

Uxc6EirmISCaEmKu-izobrazenie.png

Note: If you do not see the Directory Service tab, update JumpServer to the latest version.

Add the required domain accounts to this directory service asset.

In System Settings → Platforms, select the platform used for domain assets (for example, Windows2016) and enable the DS Enabled option.
Note: If the platform is a default one and cannot be edited, simply create a duplicate of it.

In Console → Assets, select the required asset and open it for editing. At the bottom, you should see the Directory service parameter. Specify the name of the DS asset you created.

IANnHvRY84Vp3Krk-izobrazenie.png

The domain accounts will now appear for each domain asset, and you will be able to use them for connections.

<< Command filter configuration for SSH and database queries Automatic privilege escalation when connecting via SSH >>

Need help?

Support during the JumpServer PAM Enterprise Edition pilot

Have you started testing JumpServer PAM EE and encountered an issue? Our process includes organizing email threads or Telegram groups for prompt issue resolution. If you are sure you were not added to such a group, please contact your supplier or reach out to us at support@afi-d.ru

Training for your specialists on configuring and administering JumpServer PAM

As part of an active technical support subscription, we will train your specialists in installation, configuration, administration of JumpServer PAM, as well as recovery from errors and incidents.

Training is conducted online, according to a pre-agreed plan, and includes mandatory practical knowledge verification with the issuance of personalized certificates (upon successful exam completion).

Video tutorials

Visit our channel on YouTube with video tutorials covering the configuration of all JumpServer PAM sections. The videos are in Russian and are updated with each new release.

Technical support for the free JumpServer PAM Community Edition

The idea of implementing a complex but business-critical PAM system can be intimidating due to the perceived complexity of setup, administrator and security team training, and changes to account management processes.

To make the deployment and configuration of JumpServer Community Edition comfortable, and to ensure you can always rely on professional assistance, AFI Distribution offers an annual technical support subscription.

The support package priced at 1.5 million RUB per JumpServer Community Edition instance (with no limits on the number of users or target systems) includes everything required to use PAM:

  • Russian-language documentation;
  • usage scenarios and recommended deployment architectures;
  • training for administrators and information security specialists on working with JumpServer;
  • tips and solutions for common questions;
  • notifications about new releases with verified upgrade instructions;
  • integration with RADIUS and multi-factor authentication “Multifactor” ;
  • direct access to an engineer (no first-line support) with a clear SLA.
Learn more and make a purchase on the Technical support subscription page