FriedCircuits/ansible-ad-ssh-key-deployer

Deploy SSH public keys stoed in AD to a slew of hosts

Active Directory SSH Key Deployer

Deploys SSH public keys stored in AD to a slew of hosts.

This automation requires specific setup in your Active Directory environment, as described in the following blog posts:

• Storing SSH Keys in Active Directory for Easy Deployment
• Managing SSH Keys Storedd in Active Directory

Requirements

There are no prerequisites.

Role Variables

• ldap_server - The FQDN of the AD DC server.
• ldap_bind_dn - The user to bind to the directory with.
• ldap_bind_pw - The password for the bind user.
• ldap_user_base - The top level DN of your AD where users are stored.
• ldap_filter - The filter to use to get only valid Linux users

Dependencies

There are no dependencies.

Example Playbook

    ---
    - hosts: servers
      become: true
      roles:
         - { role: ssh-key-deployer,
             ldap_server: "ldap://ex-dc-prod-vmw-01.corp.example.com",
             ldap_bind_dn: svc.ro-bind@corp.example.com,
             ldap_bind_pw: somepasswd,
             ldap_user_base: "OU=Example,DC=corp,DC=example,DC=com",
             ldap_filter: (uidNumber=*) }

Credits

Contributors

• Ted Salmon <tsalmon@laslabs.com>
• Dave Lasley <dave@laslabs.com>

Maintainer

This module is maintained by LasLabs Inc.

• https://github.com/LasLabs/ansible-ad-ssh-key-deployer