BranchesTags

Repository files navigation

james

james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.

It is designed to fetch a list of authorized keys from a remote HTTPS server.

Installation

Grab a binary from a releases or compile from source. Nothing magical.

Running

james should be added to sshd_config as AuthorizedKeysCommand.

The following tokens from OpenSSH are supported:

TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername

Additional flags

FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path

Implement the server-side

james will issue a GET request containing the following parameters. Most optional.

NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag

*: Optional

The complete response from the server will be written to standard output. Server failures (HTTP response code 5xx) will be retried five times with exponential backoff before giving up.

Examples

Allowing all keys from the Github user nat

AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate

AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys

AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About

A helper for AuthorizedKeysCommand

Topics

ssh-keyssh-server

Resources

Readme
MIT license
Activity
Custom properties

Stars

4 stars

Watchers

5 watching

Forks

2 forks
Report repository

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
BranchesTags
Repository files navigation
james
james is a utility to be used as a AuthorizedKeysCommand for OpenSSH.
It is designed to fetch a list of authorized keys from a remote HTTPS
server.
Installation
Grab a binary from a releases or compile from source. Nothing magical.
Running
james should be added to sshd_config as AuthorizedKeysCommand.
The following tokens from OpenSSH are supported:
TokenFlagDescriptionForm key
%f-fThe fingerprint of the key or certificatefingerprint
%h-hThe home directory of the userhome
%k-kThe base64-encoded key or certificate for authenticationkey
%t-tThe key or certificate typekeytype
%U-UThe numeric user ID of the target useruid
%u-uThe usernameusername
Additional flags
FlagDefaultDescription
--urlhttps://github.com/[username].keysURL to retrieve keys from
--hostnameauto-detectedThe local hostname
--port22TCP port of the local SSH server
--use-syslogtrueLog to syslog
--guess-remote-iptrueTry to guess remote IP. Requires root
--dump Dump HTTP traffic to path
Implement the server-side
james will issue a GET request containing the following parameters.
Most optional.
NameDescription
service_hostnameWill try to guess or use hostname provided from --hostname
service_port *Will assume standard port if none provided using --port
remote_ip *Will only be provided if --guess-remote-ip=false is not provided
fingerprint *-f flag
home *-h flag
key *-k flag
keytype *-t flag
uid *-U flag
username *-u flag
*: Optional
The complete response from the server will be written to standard
output. Server failures (HTTP response code 5xx) will be retried
five times with exponential backoff before giving up.
Examples
Allowing all keys from the Github user nat
AuthorizedKeysCommand /sbin/james --url https://github.com/nat.keys --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Retrieving keys from a Github user named as the user trying to authenticate
AuthorizedKeysCommand /sbin/james --guess-remote-ip=false
AuthorizedKeysCommandUser nobody

Contact something intelligent getting a list of keys
AuthorizedKeysCommand /sbin/james --url https://ssh-gatekeeper.example.com -f %f -u %u
AuthorizedKeysCommandUser root # required to guess remote IP

About
A helper for AuthorizedKeysCommand
Topics
ssh-keyssh-server
Resources
Readme
MIT license
Activity
Custom properties
Stars
4 stars
Watchers
5 watching
Forks
2 forks
Report repository
Releases
Packages
Used by
Contributors
Languages