userify/shim
View on GitHub ↗ ★ 66 Python
The Userify Shim (cloud agent)
13 mentions on Hacker News by 5 people: 0 stories, 13 comments · first 2015-02-19 · latest 2026-03-03
20082026
-
…their sessions. No inbound ports to nodes, no PAM/NSS hooks, auditable. Shim (old but readable): https://github.com/userify/shim/blob/master/shim.py#L308 (obligatory): https://userify.com
comment by jamiesonbecker · 2026-03-03 · in Disable Your SSH access accidentally with scp -
How does this compare to Userify's plain-jane SSH key technique? That agent (Python, single-file https://github.com/userify/shim ) sticks with decentralized regular keys and only centralizes the control plane, which seems to be more…
comment by _hyn3 · 2025-03-25 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH -
Yes, you're exactly right. ( https://github.com/userify/shim/blob/master/shim.py#L209 ) We've thought about porting Userify to work with CA's too but haven't had many requests for that for some reason, even though I'm sure many companies…
comment by jamiesonbecker · 2024-08-06 · in Show HN: I built a simple, open-source tool to manage servers and SSH keys -
…it is just Linux users, created with adduser just like you'd type in at the command line: https://github.com/userify/shim/blob/master/shim.py#L227
comment by superq · 2024-05-01 · in Run0, a systemd based alternative to sudo, announced -
…or you can enforce MFA across your entire company. (No MFA, no login) Your servers run a small ( https://github.com/userify/shim ) python script that continuously checks in with Userify via HTTPS (multi-cloud, only needs outbound HTTPS…
comment by jamiesonbecker · 2023-08-20 · in Show HN: Userify SSH Key Manager -
…a UI on top of a script!) You can run your own server for management, and that's what we do. 0. https://github.com/userify/shim/blob/master/shim.py
comment by gunapologist99 · 2022-08-31 · in Poll HN: Do you use SSH certificates (not mere public-key authentication)? -
The Userify daemon in this case is just a shell or python script ( https://github.com/userify/shim ) so pretty simple to audit.
comment by gunapologist99 · 2022-02-17 · in 1Password for SSH and Git (Beta) -
…so existing system or backup accounts are safe and won't ever be touched. Here's the source code: https://github.com/userify/shim/blob/master/shim.py#L161
comment by _hyn3 · 2017-05-12 · in Ask HN: How do you manage SSH keys and SSL certificates in your company? -
…and we're hardened against XSS, CSRF, and any sort of injection. The shim source is available here: https://github.com/userify/shim (see https://userify.com/faq/ for more on the security stuff we do and we're open to more ideas) and,…
comment by jamiesonbecker · 2016-07-07 · in KeyBox: Web-Based SSH Access and Key Management -
…or anywhere in between. AJAX changed everything. This is simply better. 1. https://userify.com 2. https://github.com/userify/shim
comment by jamiesonbecker · 2015-10-03 · in API server and a static front end – the future? -
…one sshmux for everyone. Right, we're automating the .ssh/authorized_keys (and sudoers) right now ( https://github.com/userify/shim/blob/master/shim.py ), so you can set it up however you like, as long as those boxes can get to either…
comment by jamiesonbecker · 2015-09-07 · in Sshmuxd: SSH proxy to replace jump hosts -
…/usr/sbin/adduser and /etc/sudoers.d. The shim is just a few hundred lines.. read through it at https://github.com/userify/shim
comment by jamiesonbecker · 2015-08-14 · in OpenSSH 7.0 released -
…As for the userify shim, even though you've answered my question: https://github.com/userify/shim/issues/4 -- you might still want to include a license file, or something along the lines of: http://www.tarsnap.com/legal.html
comment by e12e · 2015-02-19 · in Duplicate SSH Keys Everywhere