HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Home Page: https://github.com/google/hiba
License: BSD 3-Clause "New" or "Revised" License
hiba-ca.sh script does not accept '-m' option but prints it if called with '--help'
This happens kind of randomly and is related to the certificate size
Gathering fresh sources for openssh-portable, openssl, and hiba I run into a build error.
Following the instructions on INSTALL.md, I gathered sources
$ git clone [email protected]:openssh/openssh-portable.git
$ git clone [email protected]:sourcequench/hiba.git
$ git clone git://git.openssl.org/openssl.git
Building openssl and openssh (with the addition of LD_LIBRARY_PATH=../openssl) worked out fine.
The autogen.sh and configure steps worked fine for hiba, but make ended in sadness - looks like an issue with untyped struct for revocations.
make
make all-am
make[1]: Entering directory '/home/ryanshea/git/hiba'
CC libhiba_la-revocations.lo
In file included from revocations.c:15:
revocations.c: In function 'hibagrl_decode':
revocations.c:173:80: error: invalid use of undefined type 'struct sshbuf'
173 | debug3("hibagrl_decode: serial list section content @%zu", blob->off);
| ^~
../openssh-portable/log.h:88:100: note: in definition of macro 'debug3'
88 | #define debug3(...) sshlog(__FILE__, __func__, __LINE__, 0, SYSLOG_LEVEL_DEBUG3, NULL, __VA_ARGS__)
| ^~~~~~~~~~~
revocations.c:189:75: error: invalid use of undefined type 'struct sshbuf'
189 | debug3("hibagrl_decode: bitmap section content @%zu", blob->off);
| ^~
../openssh-portable/log.h:88:100: note: in definition of macro 'debug3'
88 | #define debug3(...) sshlog(__FILE__, __func__, __LINE__, 0, SYSLOG_LEVEL_DEBUG3, NULL, __VA_ARGS__)
| ^~~~~~~~~~~
make[1]: *** [Makefile:609: libhiba_la-revocations.lo] Error 1
make[1]: Leaving directory '/home/ryanshea/git/hiba'
make: *** [Makefile:394: all] Error 2
With 2 certificates containing revocations: (serial 5 and 10), checking serial 7 causes an infinite loop in hibagrl_check()
The checker uses the identity serial rather than the grant serial to check for revocations.
A grant validity represents how long the grant will authorized access from the time the user certificate is valid. The hiba-chk binary verifies this but uses the host certificate as the reference instead of the user certificate, causing grants with a validity set to expire prematurely.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.