Active Directory SSH Key Deployer
Deploys SSH public keys stored in AD to a slew of hosts.
This automation requires specific setup in your Active Directory environment, as described in the following blog posts:
- Storing SSH Keys in Active Directory for Easy Deployment
- Managing SSH Keys Storedd in Active Directory
Requirements
There are no prerequisites.
Role Variables
ldap_server- The FQDN of the AD DC server.ldap_bind_dn- The user to bind to the directory with.ldap_bind_pw- The password for the bind user.ldap_user_base- The top level DN of your AD where users are stored.ldap_filter- The filter to use to get only valid Linux users
Dependencies
There are no dependencies.
Example Playbook
---
- hosts: servers
become: true
roles:
- { role: ssh-key-deployer,
ldap_server: "ldap://ex-dc-prod-vmw-01.corp.example.com",
ldap_bind_dn: svc.ro-bind@corp.example.com,
ldap_bind_pw: somepasswd,
ldap_user_base: "OU=Example,DC=corp,DC=example,DC=com",
ldap_filter: (uidNumber=*) }Credits
Contributors
- Ted Salmon <tsalmon@laslabs.com>
- Dave Lasley <dave@laslabs.com>
Maintainer
This module is maintained by LasLabs Inc.