Recently reading
https://jpmens.net/2025/03/25/authorizedkeyscommand-in-sshd/
by nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqrmlrk8t89jh2vv57je7xczz4nn5shkaa6m6zqqyh2hjt5ay9m9vse8h77u (nprofile…h77u) and pondered how it could be tied to LDAP, vaguely remembering someone writing about doing as much.
Sure enough, nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq3n409lc4d9w06xuqurrkkh4mtdzc2afc5m07tkkc26u7p2lcq04q2kq5wq (nprofile…q5wq) posted about how ssh-ldap-{helper,wrapper} came to OpenSSH and the AuthorizedKeysCommand functionality:
https://mwl.io/archives/1470
Now I just have to find the time to poke at this (which translates as "this will occupy space in my brain until mid-August when the kids return to school")
Tim Chase
npub1n5…ucr3d
2025-05-25 00:43:42 UTC
Author Public Key
npub1n507nu5u0g0yy3jv8xzlwxzluyft9ps5p5etskrd6dxxlykkm8hqtucr3dPublished at
2025-05-25 00:43:42 UTCEvent JSON
{
"id": "1e45c9af10a3be2cd26bacd2a86bb39e9e6a1acde819c5b85fad51e358d709ae",
"pubkey": "9d1fe9f29c7a1e42464c3985f7185fe112b286140d32b8586dd34c6f92d6d9ee",
"created_at": 1748133822,
"kind": 1,
"tags": [
[
"p",
"1efe3b1d672caea6329e967c6c08559ce90bdbbdd6f420009755e4ba7485d959",
"wss://relay.mostr.pub"
],
[
"p",
"8ceaf2ff15695cfd1b80e0c76b5ebb5b45857538a6dfe5dad856b9e0abf803ea",
"wss://relay.mostr.pub"
],
[
"p",
"4421e6f8f57df36e663f1a4568344196e61ea62eb94203c9c02d83bcb3eb9c66",
"wss://relay.mostr.pub"
],
[
"p",
"967c6f3bb809d3ae791381503ec70d0da6a7ec7366f83b7c046e72d0a0748e98",
"wss://relay.mostr.pub"
],
[
"proxy",
"https://mastodon.bsd.cafe/users/gumnos/statuses/114565698213939942",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.mostr.pub"
]
],
"content": "Recently reading\n\nhttps://jpmens.net/2025/03/25/authorizedkeyscommand-in-sshd/\n\nby nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqrmlrk8t89jh2vv57je7xczz4nn5shkaa6m6zqqyh2hjt5ay9m9vse8h77u and pondered how it could be tied to LDAP, vaguely remembering someone writing about doing as much.\n\nSure enough, nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq3n409lc4d9w06xuqurrkkh4mtdzc2afc5m07tkkc26u7p2lcq04q2kq5wq posted about how ssh-ldap-{helper,wrapper} came to OpenSSH and the AuthorizedKeysCommand functionality:\n\nhttps://mwl.io/archives/1470\n\nNow I just have to find the time to poke at this (which translates as \"this will occupy space in my brain until mid-August when the kids return to school\")",
"sig": "5c32906e9c9a2c2e774f49e4f03d143f306ab6aba9d59dc19a6b464528567e1d325796a6dfc53612113ceb5a4618fdaa413abaf8c1251dc368dda3dfd073444d"
}