google/hiba
View on GitHub ↗ ★ 390 C
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
4 mentions on Hacker News by 4 people: 2 stories, 2 comments · first 2021-09-22 · latest 2023-04-17
20082026
-
…enough this is getting another layer on top of it. Google is working on something called "HIBA" ( https://github.com/google/hiba ) which is an extension to OpenSSH SSH Certificates. So now you have layers of: - SSH RFC - OpenSSH extensions…
comment by er4hn · 2023-04-17 · in OpenSSH versus SSH -
Has anyone here implemented Google's HIBA ( https://github.com/google/hiba ) in addition to SSH CA/certs for the extra identity and grant checks? I'm thinking about implementing HIBA with Vault managed SSH certs, and would appreciate…
comment by tehno · 2022-08-31 · in Poll HN: Do you use SSH certificates (not mere public-key authentication)?