#freeipa — Public Fediverse posts

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management ...
Continued 👉 #oraclelinux #rockylinux #selfhosting #selfhosted #ident #podman #hosting

Deploy FreeIPA on VPS

Three Red Hat flaws enable privilege escalation, led by CVE-2026-67567 (CVSS 9.9) in ACM. Two FreeIPA bugs can reach full domain compromise.

#RedHat #CVE202667567 #PrivilegeEscalation #FreeIPA #Kubernetes #ACM

https://securityonline.info/red-hat-privilege-escalation-cve-2026-67567/?utm_source=mastodon&utm_medium=jetpack_social

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management ...
Continued 👉 #selfhosting #podman #rockylinux #oraclelinux #selfhosted #ident #hosting

Deploy FreeIPA on VPS

@joneum 👆️

@dexter <https://www.reddit.com/r/freebsd/comments/1vn5orn/cft_freeipa_server_on_freebsd_looking_for_testers/> (the call for testing in Reddit, currently pinned).

Also <https://bsd.network/@joneum/117077690809687161>

Thanks!

#FreeBSD #FreeIPA #IPA #CFT

Transcript of the talk "How to provision, install, configure and keep thousands of Debian and Debian-based systems updated" at DebConf26 in Santa Fe

#ActiveDirectory #Ansible #Automation #AWX #DebConf #DebConf26 #Debian #Deploy #DevOps #FreeIPA #GitLab #GNU #IaC #Linux #migrate #Proxmox #SantaFe #talks #Ubuntu #UNL

https://osiux.com/2026-07-21-debconf26-how-to-provision-install-configure-and-keep-thousands-of-debian-and-debian-based-systems-updated.html

Transcripción de la charla "Cómo aprovisionar, instalar, configurar y mantener actualizados miles de sistemas Debian y basados en Debian" en DebConf26 en Santa Fe

#ActiveDirectory #Ansible #Automation #AWX #DebConf #DebConf26 #Debian #Deploy #DevOps #FreeIPA #GitLab #GNU #IaC #Linux #migrate #Proxmox #SantaFe #talks #Ubuntu #UNL

https://osiux.com/2026-07-21-debconf26-como-aprovisionar-instalar-configurar-y-mantener-actualizados-miles-de-sistemas-debian-y-basados-en-debian.html

Nach ca 2 Monaten, unzähligen Rückschlägen, gefühlt 25 zusätzlichen Port ist es endlich soweit: #FreeIPA installiert das erste mal auf FreeBSD #FreeBSD #FreeIPA #FreeIPAserver

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #rockylinux #oraclelinux #selfhosting #hosting #ident #podman

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management ...
Continued 👉 #podman #hosting #ident #rockylinux #selfhosting #selfhosted #oraclelinux

Deploy FreeIPA on VPS

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features of ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosting #podman #rockylinux #selfhosted #ident #hosting

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #rockylinux #oraclelinux #selfhosted #hosting #ident #podman #selfhosting

Deploy FreeIPA on VPS

It's been a while since my last post and a lot has happened. Hence, a quick update.

I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.

While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.

See here for a quick comparison:
https://kanidm.com/comparisons/

I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).

What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.

If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #selfhosting #rockylinux #oraclelinux #podman #ident #hosting

There I was, contemplating moving my stuff to #Codeberg, worrying about missing support for trusted publishing to PyPI.

I guess I won't :(

https://codeberg.org/Codeberg/org/pulls/1253/files

> You must not share projects that mostly consist of code written by "generative AI"-tools (including services such as Claude, OpenAI Codex).

I wonder how they are going to measure "mostly consist of".

#FreeIPA is already moving away: https://forge.fedoraproject.org/forge/forge/issues/682

EDIT: More details in https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html

#AI #LLM

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #rockylinux #podman #ident #selfhosting #selfhosted

Deploy FreeIPA on VPS
#almalinux #freeipa #hosting #ident #oraclelinux #podman #rockylinux #selfhosted #selfhosting #vps #Cloud #Guides #VPS

Deploy FreeIPA On VPS - Rad We...

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #rockylinux #selfhosting #selfhosted #podman #oraclelinux #hosting #ident

Deploy FreeIPA on VPS

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #selfhosted #podman #oraclelinux #hosting #selfhosting #rockylinux #ident

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #ident #hosting #selfhosting #selfhosted #podman #rockylinux #oraclelinux

Part 5 of my homelab downsizing series: a week building the wrong cert automation (acme-proxy — turns out it doesn't support Cloudflare DNS-01), then six days and three attempts standing up FreeIPA as a subordinate CA before shelving it for Samba AD. Two burned signing ceremonies, one silently-discarded private key. #homelab #pki #freeipa #selfhosted

https://homelab.tod.net/posts/downsizing-the-homelab/pki-decision-journal/

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #ident #oraclelinux #rockylinux #podman #selfhosted #hosting

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #podman #ident #selfhosting #selfhosted #hosting #oraclelinux #rockylinux

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosted #podman #ident #rockylinux #hosting #selfhosting

Thanks to attendees of the #DevConf_cz Practical PKI workshop yesterday. Environments are still up; we will destroy them after the conference. Please leave feedback at https://forms.gle/nt3PyS6avy5bQAQAA. #FreeIPA #PKI

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #rockylinux #selfhosting #hosting #podman #ident #selfhosted

Как мы забыли согласовать порты и просрочили запуск важного проекта

При внедрении инфраструктурного решения часто кажется, что всё сводится к одному простому действию: открыть доступ к веб-интерфейсу. На первый-третий расчитайсь! Сервер – рас. Администратор – два. URL – три! Открыли HTTPS 443 – значит, можно запускаться. На практике с решениями, которые работают с Linux-каталогом, такой подход всё одно, что бить палкой крапиву. Веб-интерфейс – это только точка управления. Само решение не живёт в вакууме: ему нужно обращаться к контроллерам домена, LDAP-каталогу, Kerberos/KDC, DNS, NTP. И это не пожелания, а обязательная сетевая связность, без которой сервис просто не работает – даже если страница в браузере открывается. Именно поэтому при согласовании с ИБ важно приносить не просьбу «дайте доступ к серверу, сколько не жалко», а схему сетевых взаимодействий. История реальная Проект – Linux-каталог на 600 пользователей. Крайний срок – конец квартала. Мы сделали всё: Linux-каталог развёрнут, тестирование прошло, дата запуска согласована, рубашки заправлены. За день до старта звонит ИБ: «А где схема сетевых взаимодействий?». Схемы нет. Я думал: ну HTTPS же открыли – чего ещё надо? Как оказалось – надо всё остальное. И вот почему. Формально доступ к веб-морде есть. Админ может зайти, логин-пароль ввести. Но само решение не может выполнить ни одной задачи. В каталог ему не пролезть. LDAPS не согласован. Kerberos – только в наших мечтах. DNS – «ну он же работает», но в заявке нет... Я сижу и тупо смотрю на экран. Консоль открыта. Пользователей добавить нельзя.

https://habr.com/ru/articles/1046666/

#linux #ldap #kerberos #activedirectory #aldpro #freeipa #информационнаябезопасность #сетеваяинфраструктура #системноеадминистрирование #внедрение

FYI, #FreeIPA migrated to Codeberg (https://codeberg.org/freeipa/freeipa) as Pagure is in a process of being retired after #Flock conference. We updated most references already but it might take some time to propagate.