JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser.

The easiest, and most secure way to access and protect all of your infrastructure.

Identity-aware VPN and proxy for remote access to anything, anywhere.

World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

🛡️ Windows Hello™ style facial authentication for Linux

A lightweight TUI (ncurses-like) display manager for Linux and BSD (mirror of https://codeberg.org/fairyglade/ly).

Fully transparent SSH, HTTPS, MySQL and Postgres bastion/PAM that doesn't need additional client-side software

Open source AI native terminal and SRE Copilot

Plugin for sudo that requires another human to approve and monitor privileged sudo sessions

Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2.0 and PAM

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)

Automated Access and Data Protection

A web interface for managing SaltStack based infrastructure.

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

🔑 Team Access Sharing - a self-hosted solution with single sign-on for secure, easy shared access to servers, databases, and applications.

OAuth2 pam module

webdav server in rust

Go wrapper module for the Pluggable Authentication Modules (PAM) API

Python pam module supporting py3 (py2 support still exists but is deprecated)

This is the PAM to RADIUS authentication module. It allows any Linux, OSX or Solaris machine to become a RADIUS client for authentication and password change requests.

Use fingerprint readers with a Linux desktop environment

Safe Rust API to the Linux Pluggable Authentication Modules (PAM)

WebAuthn (U2F) helper for CLI operations (e.g. SSH Log in)

Allows Linux user authentication to OAuth2 via pam_exec

A web-server based remote tailing tool writing in golang

Dynamic Message Of The Day (MOTD) For Raspberry Pi

Pam based webhook authentication for Kubernetes

Guide to setup a Yubikey for Fedora KDE as 2FA using U2F for the SDDM login screen, lock screen, sudo and su.

A toy sudo clone written in Rust

pam_oidc authenticates users with an OpenID Connect (OIDC) token.