I assigned myself to look at it more, but probably won't get to look at it properly before Friday then just do it.

Also I did check the AWS security policy, and it looked fine. And the nothing jumped out at me from the logs, although all of the hosts get a lot of bad ssh connection attempts.

The ppc64le-test machine is in a lab in brno... perhaps @sharkcz could help us reset that one?

Okay, I've found two problems:

1. sss_ssh_authorizedkeys james returns Error looking up public keys on aarch64-test01.fedorainfracloud.org and rawhide-test.fedorainfracloud.org
2. Amazon images have /usr/lib/systemd/system/sshd.service.d/ec2-instance-connect.conf on f43 and f42 ... which overrides AuthorizedKeysCommand with /usr/bin/eic_run_authorized_keys and thus. sss_ssh_authorizedkeys never runs.

...the second we can fix/workaround in a few ways, and on f43 I've currently basically done:

echo '/usr/bin/sss_ssh_authorizedkeys "$@"' >> /usr/bin/eic_run_authorized_keys

...and that works again now.

Problem 1 was that the VPN certs had expired. Fixed that, so everything is better now ... should still do some longer term fix for the amazon eic_run_authorized_keys thing.