Re: [PLUG] Sharing SSH keys between Linux hosts

On Fri, Jan 9, 2026 at 1:25 PM Rich Freeman via plug <plug@lists.phillylinux.org> wrote:

(Warning, this is drifting a little off-topic.)

It's a Linux list, there is no staying solely on-topic ... LOL

On 1/9/2026 1:10 PM, brent saner via plug wrote:

For what it's worth, there is a multitude of software that can manage SSH pubkey distribution. If you're using SSSD with AD/LDAP auth, you can even store users' SSH pubkeys in the directory itself bound to their user object and SSSD can dynamically fetch it/them at runtime directly.

I've seen orgs use LDAP to manage authorized_keys or the equivalent. Does anybody do some kind of federated authentication with ssh, like OIDC/etc?

I'm not sure how useful it would be for me at home, since I'd want to be able to use ssh to troubleshoot the authentication service - there are just some infra items you don't want too many dependencies with. I'm just curious what is out there, and since the list is low-traffic I figured I'd start a conversation here instead of chatting with an LLM about it. :)
-- 
Rich
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug

Mike. Leone, <mailto:turgon@mike-leone.com>

PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
Photo Gallery: <http://www.flickr.com/photos/mikeleonephotos>

___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug