Search Results for "open ssh"

Open Source step-ca provides the infrastructure, automations, and workflows to securely create and operate a private certificate authority. step-ca makes it easy for developers, operators and security teams to manage certificates for production workloads. Get a public key infrastructure and certificate authority running in minutes. Automate enrollment using ACME, OIDC, one-time tokens, cloud APIs and more. Use systemD timers, daemon mode, cron jobs, CI/CD, and more to automate certificate...

Fail2Ban scans log files and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time, although any arbitrary other action (e.g. sending an email) could also be configured. Out of the box Fail2Ban comes with filters for various services (apache, courier, ssh, etc). Fail2Ban is able to reduce the rate of incorrect authentications attempts...

Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider, covering the broadest possible set of requirements and integrations. You should not need any other components (like Keycloak) when you use Kanidm - we already have everything you need. To achieve this we rely heavily on strict defaults, simple...

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

Internet Account Replication (IAR) replicates POSIX user credentials between hosts. It is like NIS, but it: * Is really easy to use -- it practically works out of the box; * Works over the Internet -- it is compatible with regular firewalls; and, * Uses SSH to encrypt the data-flow It relies upon GNU nsswitch.conf (in glibc) for integration. GNU GPL 3 licensed.

OrgLDAP is an extensible LDAP user management application supporting groups, *NIX (POSIX, Shadow), Samba and other account types, SSH public keys and sudo roles. It includes a reusable extensible library and a web-based front-end.

SSHCE brings list of hosts from LDAP server (based on given ldap filter) and sends command to selected hosts through ssh protocol.

Key Manager is designed to allow distribution and management of SSH keys in a way that scales beyond manually copying public keys to remote hosts. This approaches Single-Sign-On functionality, if limited to ssh access from a single host.

BatchSSH (or just bssh) is a command line tool for batch execution of commands over SSHv2. BatchSSH is implemented in Java and is therefore platform agnostic. It support's simple but flexible target host definition, SSH gateways and Single-Sign-On.

This small project fills a need for network administrators to centralize their SSH keys management. It allows to manage a database of public keys via a GUI (and an upcoming command line interface), dinamically enabiling on a per-key, per-user and per-host