can we use AD users ? (question)

[ksourdrille]

Hello, can we use the active directory users with the-bastion ?

[dwydler]

Hello,
one option is to you use SSSD and store the public key in a attribute of the user object in the active directory.

[ksourdrille]

Hello @dwydler,

thank you for the reply, is that simple to set up ?

[dwydler]

It's always relative.

That depends a bit on your knowledge of Active Directory, Linux, SSSD. My colleague planned, tested, implemented and documented it in just under 5 days.

[ksourdrille]

Hum, i see, the documention is not public ?

[dwydler]

Which documentation is not public?

[ksourdrille]

"My colleague planned, tested, implemented and documented" <- this one

[dwydler]

https://sssd.io/docs/introduction.html

[ksourdrille]

no, the doc of your colleague is not public ?

[dwydler]

No, it's not public

[ksourdrille]

yes no problem :)

Do you know step by step how he set up this ?

[dwydler]

Certainly when I read our documentary. ;-)
I'm not allowed to pass it on - sorry.

[ksourdrille]

thanks anyway :)