#freeipa — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #freeipa, aggregated by home.social.
-
Deploy #FreeIPA on #VPS
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management ...
Continued 👉 #oraclelinux #rockylinux #selfhosting #selfhosted #ident #podman #hosting
Deploy FreeIPA on VPS -
Three Red Hat flaws enable privilege escalation, led by CVE-2026-67567 (CVSS 9.9) in ACM. Two FreeIPA bugs can reach full domain compromise.
#RedHat #CVE202667567 #PrivilegeEscalation #FreeIPA #Kubernetes #ACM
-
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #rockylinux #ident #hosting #podman #oraclelinux #selfhosting #selfhosted -
Deploy #FreeIPA on #VPS
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management ...
Continued 👉 #selfhosting #podman #rockylinux #oraclelinux #selfhosted #ident #hosting
Deploy FreeIPA on VPS -
@joneum 👆️
@dexter <https://www.reddit.com/r/freebsd/comments/1vn5orn/cft_freeipa_server_on_freebsd_looking_for_testers/> (the call for testing in Reddit, currently pinned).
Also <https://bsd.network/@joneum/117077690809687161>
Thanks!
-
@joneum 👆️
@dexter <https://www.reddit.com/r/freebsd/comments/1vn5orn/cft_freeipa_server_on_freebsd_looking_for_testers/> (the call for testing in Reddit, currently pinned).
Also <https://bsd.network/@joneum/117077690809687161>
Thanks!
-
Transcript of the talk "How to provision, install, configure and keep thousands of Debian and Debian-based systems updated" at DebConf26 in Santa Fe
#ActiveDirectory #Ansible #Automation #AWX #DebConf #DebConf26 #Debian #Deploy #DevOps #FreeIPA #GitLab #GNU #IaC #Linux #migrate #Proxmox #SantaFe #talks #Ubuntu #UNL
-
Transcript of the talk "How to provision, install, configure and keep thousands of Debian and Debian-based systems updated" at DebConf26 in Santa Fe
#ActiveDirectory #Ansible #Automation #AWX #DebConf #DebConf26 #Debian #Deploy #DevOps #FreeIPA #GitLab #GNU #IaC #Linux #migrate #Proxmox #SantaFe #talks #Ubuntu #UNL
-
Transcripción de la charla "Cómo aprovisionar, instalar, configurar y mantener actualizados miles de sistemas Debian y basados en Debian" en DebConf26 en Santa Fe
#ActiveDirectory #Ansible #Automation #AWX #DebConf #DebConf26 #Debian #Deploy #DevOps #FreeIPA #GitLab #GNU #IaC #Linux #migrate #Proxmox #SantaFe #talks #Ubuntu #UNL
-
Transcripción de la charla "Cómo aprovisionar, instalar, configurar y mantener actualizados miles de sistemas Debian y basados en Debian" en DebConf26 en Santa Fe
#ActiveDirectory #Ansible #Automation #AWX #DebConf #DebConf26 #Debian #Deploy #DevOps #FreeIPA #GitLab #GNU #IaC #Linux #migrate #Proxmox #SantaFe #talks #Ubuntu #UNL
-
Nach ca 2 Monaten, unzähligen Rückschlägen, gefühlt 25 zusätzlichen Port ist es endlich soweit: #FreeIPA installiert das erste mal auf FreeBSD #FreeBSD #FreeIPA #FreeIPAserver
-
Nach ca 2 Monaten, unzähligen Rückschlägen, gefühlt 25 zusätzlichen Port ist es endlich soweit: #FreeIPA installiert das erste mal auf FreeBSD #FreeBSD #FreeIPA #FreeIPAserver
-
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #rockylinux #oraclelinux #selfhosting #hosting #ident #podman -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #rockylinux #oraclelinux #selfhosting #hosting #ident #podman -
Deploy #FreeIPA on #VPS
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management ...
Continued 👉 #podman #hosting #ident #rockylinux #selfhosting #selfhosted #oraclelinux
Deploy FreeIPA on VPS -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #oraclelinux #rockylinux #ident #hosting #selfhosting #podman #selfhosted -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosting #podman #rockylinux #selfhosted #ident #hosting -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosting #podman #rockylinux #selfhosted #ident #hosting -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #podman #rockylinux #hosting #ident #selfhosted #selfhosting #oraclelinux -
Deploy #FreeIPA on #VPS
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #rockylinux #oraclelinux #selfhosted #hosting #ident #podman #selfhosting
Deploy FreeIPA on VPS -
It's been a while since my last post and a lot has happened. Hence, a quick update.
I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.
While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.
See here for a quick comparison:
https://kanidm.com/comparisons/I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).
What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.
If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.
-
It's been a while since my last post and a lot has happened. Hence, a quick update.
I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.
While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.
See here for a quick comparison:
https://kanidm.com/comparisons/I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).
What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.
If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.
-
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #selfhosting #rockylinux #oraclelinux #podman #ident #hosting -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #selfhosting #rockylinux #oraclelinux #podman #ident #hosting -
There I was, contemplating moving my stuff to #Codeberg, worrying about missing support for trusted publishing to PyPI.
I guess I won't :(
https://codeberg.org/Codeberg/org/pulls/1253/files
> You must not share projects that mostly consist of code written by "generative AI"-tools (including services such as Claude, OpenAI Codex).
I wonder how they are going to measure "mostly consist of".
#FreeIPA is already moving away: https://forge.fedoraproject.org/forge/forge/issues/682
EDIT: More details in https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html
-
There I was, contemplating moving my stuff to #Codeberg, worrying about missing support for trusted publishing to PyPI.
I guess I won't :(
https://codeberg.org/Codeberg/org/pulls/1253/files
> You must not share projects that mostly consist of code written by "generative AI"-tools (including services such as Claude, OpenAI Codex).
I wonder how they are going to measure "mostly consist of".
#FreeIPA is already moving away: https://forge.fedoraproject.org/forge/forge/issues/682
EDIT: More details in https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html
-
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #rockylinux #podman #ident #selfhosting #selfhosted -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #rockylinux #podman #ident #selfhosting #selfhosted -
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #ident #oraclelinux #podman #hosting #selfhosting #rockylinux #selfhosted -
Deploy #FreeIPA on #VPS
Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #rockylinux #selfhosting #selfhosted #podman #oraclelinux #hosting #ident
Deploy FreeIPA on VPS -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #selfhosted #podman #oraclelinux #hosting #selfhosting #rockylinux #ident
Deploy FreeIPA Server on Cloud... -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #ident #hosting #selfhosting #selfhosted #podman #rockylinux #oraclelinux -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #ident #hosting #selfhosting #selfhosted #podman #rockylinux #oraclelinux -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #selfhosted #ident #hosting #rockylinux #podman #oraclelinux #selfhosting -
Part 5 of my homelab downsizing series: a week building the wrong cert automation (acme-proxy — turns out it doesn't support Cloudflare DNS-01), then six days and three attempts standing up FreeIPA as a subordinate CA before shelving it for Samba AD. Two burned signing ceremonies, one silently-discarded private key. #homelab #pki #freeipa #selfhosted
https://homelab.tod.net/posts/downsizing-the-homelab/pki-decision-journal/
-
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #ident #oraclelinux #rockylinux #podman #selfhosted #hosting -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #ident #oraclelinux #rockylinux #podman #selfhosted #hosting -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #oraclelinux #podman #selfhosting #hosting #ident #selfhosted #rockylinux -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #podman #ident #selfhosting #selfhosted #hosting #oraclelinux #rockylinux
Deploy FreeIPA Server on Cloud... -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosted #podman #ident #rockylinux #hosting #selfhosting -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosted #podman #ident #rockylinux #hosting #selfhosting -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #podman #selfhosted #selfhosting #ident #oraclelinux #rockylinux #hosting -
Thanks to attendees of the #DevConf_cz Practical PKI workshop yesterday. Environments are still up; we will destroy them after the conference. Please leave feedback at https://forms.gle/nt3PyS6avy5bQAQAA. #FreeIPA #PKI
-
Thanks to attendees of the #DevConf_cz Practical PKI workshop yesterday. Environments are still up; we will destroy them after the conference. Please leave feedback at https://forms.gle/nt3PyS6avy5bQAQAA. #FreeIPA #PKI
-
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #rockylinux #selfhosting #hosting #podman #ident #selfhosted -
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #rockylinux #selfhosting #hosting #podman #ident #selfhosted -
Как мы забыли согласовать порты и просрочили запуск важного проекта
При внедрении инфраструктурного решения часто кажется, что всё сводится к одному простому действию: открыть доступ к веб-интерфейсу. На первый-третий расчитайсь! Сервер – рас. Администратор – два. URL – три! Открыли HTTPS 443 – значит, можно запускаться. На практике с решениями, которые работают с Linux-каталогом, такой подход всё одно, что бить палкой крапиву. Веб-интерфейс – это только точка управления. Само решение не живёт в вакууме: ему нужно обращаться к контроллерам домена, LDAP-каталогу, Kerberos/KDC, DNS, NTP. И это не пожелания, а обязательная сетевая связность, без которой сервис просто не работает – даже если страница в браузере открывается. Именно поэтому при согласовании с ИБ важно приносить не просьбу «дайте доступ к серверу, сколько не жалко», а схему сетевых взаимодействий. История реальная Проект – Linux-каталог на 600 пользователей. Крайний срок – конец квартала. Мы сделали всё: Linux-каталог развёрнут, тестирование прошло, дата запуска согласована, рубашки заправлены. За день до старта звонит ИБ: «А где схема сетевых взаимодействий?». Схемы нет. Я думал: ну HTTPS же открыли – чего ещё надо? Как оказалось – надо всё остальное. И вот почему. Формально доступ к веб-морде есть. Админ может зайти, логин-пароль ввести. Но само решение не может выполнить ни одной задачи. В каталог ему не пролезть. LDAPS не согласован. Kerberos – только в наших мечтах. DNS – «ну он же работает», но в заявке нет... Я сижу и тупо смотрю на экран. Консоль открыта. Пользователей добавить нельзя.
https://habr.com/ru/articles/1046666/
#linux #ldap #kerberos #activedirectory #aldpro #freeipa #информационнаябезопасность #сетеваяинфраструктура #системноеадминистрирование #внедрение
-
Как мы забыли согласовать порты и просрочили запуск важного проекта
При внедрении инфраструктурного решения часто кажется, что всё сводится к одному простому действию: открыть доступ к веб-интерфейсу. На первый-третий расчитайсь! Сервер – рас. Администратор – два. URL – три! Открыли HTTPS 443 – значит, можно запускаться. На практике с решениями, которые работают с Linux-каталогом, такой подход всё одно, что бить палкой крапиву. Веб-интерфейс – это только точка управления. Само решение не живёт в вакууме: ему нужно обращаться к контроллерам домена, LDAP-каталогу, Kerberos/KDC, DNS, NTP. И это не пожелания, а обязательная сетевая связность, без которой сервис просто не работает – даже если страница в браузере открывается. Именно поэтому при согласовании с ИБ важно приносить не просьбу «дайте доступ к серверу, сколько не жалко», а схему сетевых взаимодействий. История реальная Проект – Linux-каталог на 600 пользователей. Крайний срок – конец квартала. Мы сделали всё: Linux-каталог развёрнут, тестирование прошло, дата запуска согласована, рубашки заправлены. За день до старта звонит ИБ: «А где схема сетевых взаимодействий?». Схемы нет. Я думал: ну HTTPS же открыли – чего ещё надо? Как оказалось – надо всё остальное. И вот почему. Формально доступ к веб-морде есть. Админ может зайти, логин-пароль ввести. Но само решение не может выполнить ни одной задачи. В каталог ему не пролезть. LDAPS не согласован. Kerberos – только в наших мечтах. DNS – «ну он же работает», но в заявке нет... Я сижу и тупо смотрю на экран. Консоль открыта. Пользователей добавить нельзя.
https://habr.com/ru/articles/1046666/
#linux #ldap #kerberos #activedirectory #aldpro #freeipa #информационнаябезопасность #сетеваяинфраструктура #системноеадминистрирование #внедрение
-
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #rockylinux #selfhosting #ident #hosting #selfhosted #podman #oraclelinux -
FYI, #FreeIPA migrated to Codeberg (https://codeberg.org/freeipa/freeipa) as Pagure is in a process of being retired after #Flock conference. We updated most references already but it might take some time to propagate.
-
FYI, #FreeIPA migrated to Codeberg (https://codeberg.org/freeipa/freeipa) as Pagure is in a process of being retired after #Flock conference. We updated most references already but it might take some time to propagate.
-
Deploy #FreeIPA Server on Cloud #VPS
Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #selfhosted #rockylinux #ident #selfhosting #podman -
Quite by chance, stumbled across this from .ru:
https://habr.com/ru/companies/bizone/articles/922540/
Lots of interesting content if you happen to use FreeIPA. Also, linked from it: