wmantly
084c8fdfb3
New optional service (jump-host compose profile) built from the new theta42/ldap-client submodule: a genuinely SSSD + AuthorizedKeysCommand LDAP-joined host, not a container with a manually-dropped public key in authorized_keys. Lets jump-host's actual key-injection -> upstream-connect flow be exercised end-to-end against the local dev stack's own LDAP. Verified: real SSH login through jump-host's uid_-_target grammar, live key injection into LDAP, and ldap-test-host serving that key via AuthorizedKeysCommand -- both via the SSH CLI and WinSCP. config.example/ldap-test-host.vars.example documents the one field an operator fills in (the ldapclient service account's bind password, already generated by bootstrap.js as serviceAccountPass) -- the rest points at this stack's own local LDAP by default.
14 lines
392 B
Plaintext
14 lines
392 B
Plaintext
[submodule "sso-manager-node"]
|
|
path = sso-manager-node
|
|
url = https://github.com/theta42/sso-manager-node.git
|
|
[submodule "proxy"]
|
|
path = proxy
|
|
url = https://github.com/theta42/proxy.git
|
|
[submodule "jump-host"]
|
|
path = jump-host
|
|
url = https://github.com/theta42/jump-host.git
|
|
branch = master
|
|
[submodule "ldap-client"]
|
|
path = ldap-client
|
|
url = https://github.com/theta42/ldap-client.git
|