SSH authorization system based on OpenSSH CA, LDAP, a Python API and short-lived certificates.

Context

Designed a solution to control server access without manually distributing keys. The API validated users, servers and permissions in LDAP, verified cryptographic signatures and issued temporary SSH certificates through a trusted CA for each server.

Impact

Improved internal access control and turned an infrastructure need into a usable CLI-driven workflow.