Ssh – Possible to enable ssh passwordless authentication via Windows Active Directory

active-directoryauthenticationpublic-keysingle-sign-onssh

Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password?

If so, how?

I've found some documentation that suggests that it (or something like it) is possible by modifying the AD schema to make room for a public-key.

However, most of the concepts themselves are new to me, because really, I'm a developer masquerading as a sysadmin in a dev-ops team.

Context: we have some Windows boxes, and some *nix boxes, and we want to run some remote-admin automation on both sets of them in a continuous-deployment type scenario as well as an ad-hoc maintenance-from-a-central-place type scenario.