823 Commits
Author SHA1 Message Date
Alex Lyulkov 97021dcf17 Finished replicated backend 2015-09-15 01:40:34 +03:00
Alex Lyulkov e186ef04af Now telescope verifies teleport certificate using its HostCA or RemoteCAs 2015-09-07 19:50:20 +03:00
Alex Lyulkov c14f43de25 Updated mailgun/lemma/secret and gravitational/session 2015-09-06 17:54:34 +03:00
Alex Lyulkov 4733028760 Finished new cmd args parsing. Fixed Makefile 2015-09-03 14:21:50 +03:00
Alex Lyulkov f3fbc90c38 Getting env vars using kingpin. Changed makefile for the new flag names 2015-09-03 00:51:52 +03:00
Alex Lyulkov 5e137e3daa Fixed makefile tests by adding -test.parallel=0 flag. Fixed AccessPoint interface. 2015-08-26 18:31:34 +03:00
klizhentas 294a49eee8 replace the logging to the package that we control 2015-08-05 12:16:39 -07:00
klizhentas 3ce5afc00b Cleanup and make sure teleport CP is reusable 2015-07-14 17:52:12 -07:00
klizhentas c9eaacb267 Playbacks work 2015-07-10 17:24:44 -07:00
klizhentas cdbeb15b25 messages and chats work 2015-07-09 14:38:50 -07:00
klizhentas 76f28e20a9 Refactored events 2015-07-08 20:57:34 -07:00
klizhentas 0fadb4a44f not too embarrasing 2015-07-02 17:16:44 -07:00
klizhentas bbbc2a8002 add proof of concept terminal sharing 2015-06-28 19:44:07 -07:00
klizhentas f59223256c teleport connect and remote authorities
* teleport connect provides tunnel between local cluster and remote lens
* teleport can optionally trust remote authorities and allow signed keys in
2015-06-28 17:48:10 -07:00
klizhentas 1055446f06 Add support for bolt db 2015-06-17 13:20:53 -07:00
klizhentas 5ac08843ed simplify installation 2015-05-21 12:33:04 -07:00
klizhentas 51ab3a27b9 better workflow and fixes for auth tokens
* fixes the bug in token validation accepting all tokens
* provides generation of provisioning tokens to file and reading tokens from the file
* better setup of default listening ports
2015-05-20 16:35:19 -07:00
klizhentas 94279fb0c4 User manual and API reference
Update teleport documentation with the user manual and high level overview.
Generate API documentation from godoc.
2015-05-13 21:37:25 -07:00
klizhentas 12fdc19ff3 Provisioning and clear role separation
Distinct roles separation:

* Stateful auth server, it is stateful and exposes SSH
  authentication endpoint to the cluster
* Stateless ssh node, it connects to the auth server
  to authenticate access requests
* Stateless cp node, it provides web portal to access
  the cluster and update users keys

Provisioning:

* Auth server automatically sets itself up on the first start,
  no need to explicitly set encryption keys and authority certs

* SSH node connects to the Auth server to provision host private keys
  and sertificates using special SSH provisioning key issued by
  the auth server
2015-05-10 14:52:51 -07:00
klizhentas b0e03bc7e0 update install target in teleport 2015-05-05 16:00:37 -07:00
klizhentas 7e82761e33 Fix installation script 2015-05-04 08:28:32 -07:00
Alexander Klizhentas 7d17f15271 Implement web proxying, and web SSH console proof of concept 2015-04-01 21:21:07 -07:00
Alexander Klizhentas 0c425d32d5 Initial working prototype 2015-03-14 14:35:43 -07:00