SSH Access Manager

Overview

SSH Access Manager is a web application for centrally managing and deploying SSH public keys across your infrastructure. It is designed for teams and organizations where access to Unix accounts is controlled with SSH keys.

Instead of manually editing authorized_keys files on every server, SSH Access Manager lets you:

• Organize your SSH keys into key groups
• Organize your servers into host groups
• Define access rules that map key groups to host groups
• Deploy everything automatically with a single command or scheduled job

Changes propagate via SFTP, so no agent is required on target hosts.

Features

• Centralized key management — create, import, and enable/disable SSH keys from one place
• Group-based access control — organize keys and hosts into groups, then wire them together with rules
• Automated deployment — push updated authorized_keys to all hosts on demand or on a schedule
• Mixed mode — optionally preserve non-SSHAM keys already present on hosts
• Audit log — every change is recorded with who did it and when
• REST API — manage hosts and host groups programmatically using Personal Access Tokens
• Role-based permissions — Auditor, Operator, Admin, and Super Admin roles out of the box

Documentation

Full documentation is available at ssham.pacoorozco.info.

Changelog

See CHANGELOG for a full history of changes between releases.

Reporting issues

Found a bug or have a feature request? Use the issue tracker.

Contributing

Please see CONTRIBUTING for details.

License

SSH Access Manager is free software released under the GNU General Public License v3.0.

Authors

Originally created by Paco Orozco (paco at pacoorozco.info). This project has been evolving since its early days on Sourceforge.