Free openssh software for linux

OpenSSH LDAP Public Key patch provides an easy way of centralizing strong user authentication by using an LDAP server for retrieving public keys instead of ~/.ssh/authorized_keys.
It uses the standard core.schema/nis.schema and strongAuthenticationUser object class, which can simplify login centralization but could introduce serious security flaws if the LDAP server is not correctly configured.
Enhancements:
- A memory leak has been fixed.
- A potential LDAP filter injection if a username has strange characters in it [()*] has been fixed.

Dropbear is a relatively small SSH 2 server and client. Dropbear SSH runs on a variety of POSIX-based platforms.
Dropbear is open source software, distributed under a MIT-style license. Dropbear is particularly useful for "embedded"-type Linux (or other Unix) systems, such as wireless routers.
Main features:
- A small memory footprint suitable for memory-constrained environments - Dropbear can compile to a 110kB statically linked binary with uClibc on x86 (only minimal options selected)
- Dropbear server implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients
- Can run from inetd or standalone
- Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication
- The daemon, keygen, key converter, and client can be compiled into a single binary (ala busybox)
- Features can easily be disabled when compiling to save space
- TCP forwarding support

rssh is a restricted shell for use with OpenSSH, allowing only scp and/or sftp. rssh project now also includes support for rdist, rsync, and cvs.
For example, if you have a server which you only want to allow users to copy files off of via scp, without providing shell access, you can use rssh to do that.
hough rssh is written to work with OpenSSH, it will probably work with other implementations of SSH. Also, rssh is written and tested on Linux systems, but should compile cleanly and work on any POSIX.2-compliant system. It is verified to work on the following platforms:
A wide variety of Linux distributions, on IA32 and IA64 hardware
Compaq Tru64 Unix
Solaris 2.x - 8 (under certain conditions -- see the security link)
AIX 5.1
HP/UX 11.00 (PA-RISC)
HP/UX 11.22 (IA64)
Irix 6.5
Currently, it does not work on (at least most of) the *BSDs, nor on OS X. They lack the wordexp() function, which rssh uses for command line argument expansion. Until they have such a function (which is defined by POSIX.2), or until I get bored enough to write a replacement, rssh will not work with the BSDs out of the box.
Update, 7 Jun 2003: Jacques A. Vidrine reports that FreeBSD 5.0 now has the wordexp() function, and rssh compiles cleanly on it, though he has not tested it. I still do not have any confirmation that it will work on FreeBSD 5, but it seems like a safe bet. I have received reports that other operating environments are also adding support for wordexp(), and rssh should work on all of those platforms, too.
If youre on a BSD system without the wordexp() function, you could work around this by obtaining a copy of the wordexp() functions code from, say, glibc2, and creating your own wordexp.h header. Compile wordexp.c manually, and link it against the other .o files. I have no intention of doing any work to facilitate that, though, so youre on your own.
If you have success using rssh with some other implementation of SSH, or using it on other platforms, feel free to send e-mail to the rssh mailing list to let me know. If you have problems compiling or installing rssh on your favorite platform, please send me the complete configure output, and any compilation errors generated.
Enhancements:
- This release fixes a design flaw in rssh_chroot_helper that allowed local users with full shell access to gain root privileges.

DSSH was written as a direct replacement for OpenSSH client for our use. The project adds SSH over SSH tuneling capabilities (for example to log in to network which is hidden by firewall), scripting support (using Groovy), advanced agent (which allows storing of passwords) and "su -" interactive logging for machines, which have disabled direct root login.

All of this was done to enable automated scripting and logging to lots of machines based on few simple rules.

It uses Ganymed SSH library (slightly patched). I tried to contribute my changes back to Ganymed-SSH authors and if I succeed, I will probably try to stick with official Ganymed-SSH distribution.

SSHWebProxy is a Java Servlet application that enables users to access SSH Shell sessions and SSH File Transfer sessions using a web browser. All client interaction uses pure HTML, so it can be used from anywhere. SSHWebProxy is simply an HTML SSH Client.
SSHWebProxy is targeted at people who have access to an always-on Internet connection and are capable of running a Java Servlet container. SSHWebProxy was developed using JBoss, but should be compatible with any Servlet container.
SSHWebProxy supports a partial implementation of VT100 terminal emulation, and has been tested with vi. I am looking for ways to improve this and would appreciate any feedback. If you have feedback or are interested in working on this (or any other features), please let me know.
If you are decided to use SSHWebProxy, please see the Getting Started section for instructions on downloading and configuring SSHWebProxy.
Enhancements:
- Added restricted mode where users are not authenticated with SSHWebProxy but can only connect to a single host. Most useful to provide remote access to the locahost via a browser. (edaugherty)
-
- Added key based authentication. Currently, only OpenSSH and SSHTools key formats are supported. (edaugherty)