moul/sshportal
1
1
Fork 0
mirror of https://github.com/moul/sshportal.git synced 2025-10-08 20:26:10 +08:00
Code Issues Projects Releases Packages Wiki Activity

Add username and session ID to session log filename.

Browse source
This commit is contained in:
Jonathan Lestrelin 2019-06-07 16:58:41 +02:00
parent cafac0b8b5
commit 84464a4ea6
2 changed files with 11 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
pkg/bastion/session.go
View file

@ -2,6 +2,7 @@ package bastion // import "moul.io/sshportal/pkg/bastion"
import ( import (
"errors" "errors"
"fmt"
"io" "io"
"log" "log"
"os" "os"
@ -19,7 +20,7 @@ type sessionConfig struct {
ClientConfig *gossh.ClientConfig ClientConfig *gossh.ClientConfig
} }
func multiChannelHandler(srv *ssh.Server, conn *gossh.ServerConn, newChan gossh.NewChannel, ctx ssh.Context, configs []sessionConfig) error { func multiChannelHandler(srv *ssh.Server, conn *gossh.ServerConn, newChan gossh.NewChannel, ctx ssh.Context, configs []sessionConfig, sessionID uint) error {
var lastClient *gossh.Client var lastClient *gossh.Client
switch newChan.ChannelType() { switch newChan.ChannelType() {
case "session": case "session":
@ -59,8 +60,10 @@ func multiChannelHandler(srv *ssh.Server, conn *gossh.ServerConn, newChan gossh.
return err return err
} }
user := conn.User() user := conn.User()
actx := ctx.Value(authContextKey).(*authContext)
username := actx.user.Name
// pipe everything // pipe everything
return pipe(lreqs, rreqs, lch, rch, configs[len(configs)-1].Logs, user, newChan) return pipe(lreqs, rreqs, lch, rch, configs[len(configs)-1].Logs, user, username, sessionID, newChan)
case "direct-tcpip": case "direct-tcpip":
lch, lreqs, err := newChan.Accept() lch, lreqs, err := newChan.Accept()
// TODO: defer clean closer // TODO: defer clean closer
@ -102,8 +105,10 @@ func multiChannelHandler(srv *ssh.Server, conn *gossh.ServerConn, newChan gossh.
return err return err
} }
user := conn.User() user := conn.User()
actx := ctx.Value(authContextKey).(*authContext)
username := actx.user.Name
// pipe everything // pipe everything
return pipe(lreqs, rreqs, lch, rch, configs[len(configs)-1].Logs, user, newChan) return pipe(lreqs, rreqs, lch, rch, configs[len(configs)-1].Logs, user, username, sessionID, newChan)
default: default:
if err := newChan.Reject(gossh.UnknownChannelType, "unsupported channel type"); err != nil { if err := newChan.Reject(gossh.UnknownChannelType, "unsupported channel type"); err != nil {
log.Printf("failed to reject chan: %v", err) log.Printf("failed to reject chan: %v", err)
@ -112,7 +117,7 @@ func multiChannelHandler(srv *ssh.Server, conn *gossh.ServerConn, newChan gossh.
} }
} }
func pipe(lreqs, rreqs <-chan *gossh.Request, lch, rch gossh.Channel, logsLocation string, user string, newChan gossh.NewChannel) error { func pipe(lreqs, rreqs <-chan *gossh.Request, lch, rch gossh.Channel, logsLocation string, user string, username string, sessionID uint, newChan gossh.NewChannel) error {
defer func() { defer func() {
_ = lch.Close() _ = lch.Close()
_ = rch.Close() _ = rch.Close()
@ -121,7 +126,7 @@ func pipe(lreqs, rreqs <-chan *gossh.Request, lch, rch gossh.Channel, logsLocati
errch := make(chan error, 1) errch := make(chan error, 1)
channeltype := newChan.ChannelType() channeltype := newChan.ChannelType()
filename := strings.Join([]string{logsLocation, "/", user, "-", channeltype, "-", time.Now().Format(time.RFC3339)}, "") // get user filename := strings.Join([]string{logsLocation, "/", user, "-", username, "-", channeltype, "-", fmt.Sprint(sessionID), "-", time.Now().Format(time.RFC3339)}, "") // get user
f, err := os.OpenFile(filename, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0640) f, err := os.OpenFile(filename, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0640)
defer func() { defer func() {
_ = f.Close() _ = f.Close()

3
pkg/bastion/ssh.go
View file

@ -148,9 +148,8 @@ func ChannelHandler(srv *ssh.Server, conn *gossh.ServerConn, newChan gossh.NewCh
_ = ch.Close() _ = ch.Close()
return return
} }
go func() { go func() {
err = multiChannelHandler(srv, conn, newChan, ctx, sessionConfigs) err = multiChannelHandler(srv, conn, newChan, ctx, sessionConfigs, sess.ID)
if err != nil { if err != nil {
log.Printf("Error: %v", err) log.Printf("Error: %v", err)
} }