Project Description

SSH key distribution solution that is in comply with POSIX LDAP requirements and UserDB usernames. The existing LDAP service will be used for the distribution of the SSH keys.

Goal for this Hackweek

Build up the solution as PoC for SSH key distribution that meets requirements for UserDB usernames.

Step by step guide: 1. Backup the existing slapd.conf (on all of the servers), backup LDAP data. 2. Copy the public keys from the mounted user directories locally and sort them by usernames. 3. Configure SSSD by adding required attributes. 4. As it is not a good practice to modify existing schema, will add a new one. 5. SSHD configuration to point to ssssshauthorizedkeys 6. Test client server and check it's configuration

Out of scope

Server side implementation of the privacyIDEA endpoints.

Resources