AWS Simple AD SSH based authentication for Linux insatnces

Question

I currently have openldap setup where i upload new user's keys to LDAP and i am able to login to AWS EC2 Linux instances using these keys.

But i am planning to migrate to AWS Simple AD. But i want to if AWS Simple AD offer feature of uploading SSH keys for new users ?

And if allows authenticating to Linux servers using this uploaded SSH keys?

Answer 1

You can interact with Simple AD in the same way you do with any other LDAP ( Lightweight Directory Access Protocol) server. You need to be within the VPC but the following code works.

Example

/tmp/username.ldif

dn: CN=Test User,CN=Users,DC=ad,DC=example,DC=org changeType: modify add: objectClass objectClass: ldapPublicKey dn: CN=Test User,CN=Users,DC=ad,DC=example,DC=org changeType: modify add: sshPublicKey sshPublicKey: ssh-rsa ....

ldbmodify --verbose --url "ldap://ad.example.org" --user "SIMPLEAD_USERNAME" --password 'SIMPLE_AD_PASSWORD' /tmp/username.ldif

For further details you can click on the below link.

https://github.com/localytics/chef-sssd/blob/master/GETTING_STARTED.md