HIBA
A flexible authorization layer for OpenSSH certificate-based authentication using host identities and grants.
What is HIBA?
HIBA is an authorization system built on top of OpenSSH certificate-based authentication. It enables flexible, policy-driven access control by attaching host identities and user grants as extensions to SSH certificates, allowing target hosts to dynamically authorize users without manual configuration updates. It solves the problem of managing SSH access across large, dynamic host pools with minimal operational overhead.
System administrators, DevOps engineers, and security teams managing SSH access in environments with many hosts, especially those requiring granular, auditable access controls without relying on centralized authorization services.
Developers choose HIBA because it extends OpenSSH's native certificate authentication with fine-grained, declarative authorization policies, eliminating the need to push authorized_keys files. Its local evaluation makes it robust for low-dependency or last-resort access scenarios.
Overview
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
