#freeipa — Public Fediverse posts

It's been a while since my last post and a lot has happened. Hence, a quick update.

I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.

While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.

See here for a quick comparison:
https://kanidm.com/comparisons/

I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).

What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.

If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.

It's been a while since my last post and a lot has happened. Hence, a quick update.

I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.

While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.

See here for a quick comparison:
https://kanidm.com/comparisons/

I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).

What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.

If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #selfhosting #rockylinux #oraclelinux #podman #ident #hosting

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #selfhosting #rockylinux #oraclelinux #podman #ident #hosting

There I was, contemplating moving my stuff to #Codeberg, worrying about missing support for trusted publishing to PyPI.

I guess I won't :(

https://codeberg.org/Codeberg/org/pulls/1253/files

> You must not share projects that mostly consist of code written by "generative AI"-tools (including services such as Claude, OpenAI Codex).

I wonder how they are going to measure "mostly consist of".

#FreeIPA is already moving away: https://forge.fedoraproject.org/forge/forge/issues/682

EDIT: More details in https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html

#AI #LLM

There I was, contemplating moving my stuff to #Codeberg, worrying about missing support for trusted publishing to PyPI.

I guess I won't :(

https://codeberg.org/Codeberg/org/pulls/1253/files

> You must not share projects that mostly consist of code written by "generative AI"-tools (including services such as Claude, OpenAI Codex).

I wonder how they are going to measure "mostly consist of".

#FreeIPA is already moving away: https://forge.fedoraproject.org/forge/forge/issues/682

EDIT: More details in https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html

#AI #LLM

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #ident #oraclelinux #selfhosting #selfhosted #rockylinux #hosting #podman

Deploy FreeIPA on VPS

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #rockylinux #podman #ident #selfhosting #selfhosted

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #rockylinux #podman #ident #selfhosting #selfhosted

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage platform.
Key Features ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-on-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #ident #oraclelinux #podman #hosting #selfhosting #rockylinux #selfhosted

Deploy FreeIPA on VPS
#almalinux #freeipa #hosting #ident #oraclelinux #podman #rockylinux #selfhosted #selfhosting #vps #Cloud #Guides #VPS

Deploy FreeIPA On VPS - Rad We...

Deploy FreeIPA on VPS
#almalinux #freeipa #hosting #ident #oraclelinux #podman #rockylinux #selfhosted #selfhosting #vps #Cloud #Guides #VPS

Deploy FreeIPA On VPS - Rad We...

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #rockylinux #selfhosting #selfhosted #podman #oraclelinux #hosting #ident

Deploy FreeIPA on VPS

Deploy #FreeIPA on #VPS

Here’s a step-by-step guide to deploy FreeIPA on VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity ...
Continued 👉 #rockylinux #selfhosting #selfhosted #podman #oraclelinux #hosting #ident

Deploy FreeIPA on VPS

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #selfhosted #podman #oraclelinux #hosting #selfhosting #rockylinux #ident

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #selfhosted #podman #oraclelinux #hosting #selfhosting #rockylinux #ident

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #ident #hosting #selfhosting #selfhosted #podman #rockylinux #oraclelinux

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #ident #hosting #selfhosting #selfhosted #podman #rockylinux #oraclelinux

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #selfhosted #ident #hosting #rockylinux #podman #oraclelinux #selfhosting

Part 5 of my homelab downsizing series: a week building the wrong cert automation (acme-proxy — turns out it doesn't support Cloudflare DNS-01), then six days and three attempts standing up FreeIPA as a subordinate CA before shelving it for Samba AD. Two burned signing ceremonies, one silently-discarded private key. #homelab #pki #freeipa #selfhosted

https://homelab.tod.net/posts/downsizing-the-homelab/pki-decision-journal/

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #ident #oraclelinux #rockylinux #podman #selfhosted #hosting

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #ident #oraclelinux #rockylinux #podman #selfhosted #hosting

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #oraclelinux #podman #selfhosting #hosting #ident #selfhosted #rockylinux

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #podman #ident #selfhosting #selfhosted #hosting #oraclelinux #rockylinux

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an ...
Continued 👉 #podman #ident #selfhosting #selfhosted #hosting #oraclelinux #rockylinux

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosted #podman #ident #rockylinux #hosting #selfhosting

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #selfhosted #podman #ident #rockylinux #hosting #selfhosting

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #podman #selfhosted #selfhosting #ident #oraclelinux #rockylinux #hosting

Thanks to attendees of the #DevConf_cz Practical PKI workshop yesterday. Environments are still up; we will destroy them after the conference. Please leave feedback at https://forms.gle/nt3PyS6avy5bQAQAA. #FreeIPA #PKI

Thanks to attendees of the #DevConf_cz Practical PKI workshop yesterday. Environments are still up; we will destroy them after the conference. Please leave feedback at https://forms.gle/nt3PyS6avy5bQAQAA. #FreeIPA #PKI

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #rockylinux #selfhosting #hosting #podman #ident #selfhosted

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #oraclelinux #rockylinux #selfhosting #hosting #podman #ident #selfhosted

Как мы забыли согласовать порты и просрочили запуск важного проекта

При внедрении инфраструктурного решения часто кажется, что всё сводится к одному простому действию: открыть доступ к веб-интерфейсу. На первый-третий расчитайсь! Сервер – рас. Администратор – два. URL – три! Открыли HTTPS 443 – значит, можно запускаться. На практике с решениями, которые работают с Linux-каталогом, такой подход всё одно, что бить палкой крапиву. Веб-интерфейс – это только точка управления. Само решение не живёт в вакууме: ему нужно обращаться к контроллерам домена, LDAP-каталогу, Kerberos/KDC, DNS, NTP. И это не пожелания, а обязательная сетевая связность, без которой сервис просто не работает – даже если страница в браузере открывается. Именно поэтому при согласовании с ИБ важно приносить не просьбу «дайте доступ к серверу, сколько не жалко», а схему сетевых взаимодействий. История реальная Проект – Linux-каталог на 600 пользователей. Крайний срок – конец квартала. Мы сделали всё: Linux-каталог развёрнут, тестирование прошло, дата запуска согласована, рубашки заправлены. За день до старта звонит ИБ: «А где схема сетевых взаимодействий?». Схемы нет. Я думал: ну HTTPS же открыли – чего ещё надо? Как оказалось – надо всё остальное. И вот почему. Формально доступ к веб-морде есть. Админ может зайти, логин-пароль ввести. Но само решение не может выполнить ни одной задачи. В каталог ему не пролезть. LDAPS не согласован. Kerberos – только в наших мечтах. DNS – «ну он же работает», но в заявке нет... Я сижу и тупо смотрю на экран. Консоль открыта. Пользователей добавить нельзя.

https://habr.com/ru/articles/1046666/

#linux #ldap #kerberos #activedirectory #aldpro #freeipa #информационнаябезопасность #сетеваяинфраструктура #системноеадминистрирование #внедрение

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #rockylinux #selfhosting #ident #hosting #selfhosted #podman #oraclelinux

Deploy FreeIPA Server on Cloud VPS #almalinux #freeipa #hosting #ident #oraclelinux #podman #rockylinux #selfhosted #selfhosting #vps #Cloud #Guides #VPS

Deploy FreeIPA Server on Cloud...

FYI, #FreeIPA migrated to Codeberg (https://codeberg.org/freeipa/freeipa) as Pagure is in a process of being retired after #Flock conference. We updated most references already but it might take some time to propagate.

FYI, #FreeIPA migrated to Codeberg (https://codeberg.org/freeipa/freeipa) as Pagure is in a process of being retired after #Flock conference. We updated most references already but it might take some time to propagate.

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #selfhosted #rockylinux #ident #selfhosting #podman

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #selfhosted #rockylinux #ident #selfhosting #podman

Quite by chance, stumbled across this from .ru:

https://habr.com/ru/companies/bizone/articles/922540/

Lots of interesting content if you happen to use FreeIPA. Also, linked from it:

https://github.com/nu11zy/ipapocket

#freeipa, #threatintel

Quite by chance, stumbled across this from .ru:

https://habr.com/ru/companies/bizone/articles/922540/

Lots of interesting content if you happen to use FreeIPA. Also, linked from it:

https://github.com/nu11zy/ipapocket

#freeipa, #threatintel

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #podman #selfhosted #ident #hosting #selfhosting #rockylinux #oraclelinux

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #hosting #selfhosted #rockylinux #oraclelinux #podman #ident

Deploy #FreeIPA Server on Cloud #VPS Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods. What is FreeIPA? FreeIPA (Identity, Policy, Audit) is an ... Continued 👉 #selfhosted #selfhosting #hosting #oraclelinux #podman #rockylinux #ident

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods. What is FreeIPA? FreeIPA (Identity, Policy, Audit) is an ... Continued 👉 #selfhosted #selfhosting #hosting #oraclelinux #podman #rockylinux #ident

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #selfhosting #selfhosted #rockylinux #ident #hosting #oraclelinux #podman

Deploy #FreeIPA Server on Cloud #VPS Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods. What is FreeIPA? FreeIPA (Identity, Policy, Audit) is an ... Continued 👉 #selfhosted #hosting #podman #rockylinux #selfhosting #ident #oraclelinux

Deploy FreeIPA Server on Cloud...

Deploy #FreeIPA Server on Cloud #VPS Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods. What is FreeIPA? FreeIPA (Identity, Policy, Audit) is an ... Continued 👉 #selfhosted #hosting #podman #rockylinux #selfhosting #ident #oraclelinux

Deploy FreeIPA Server on Cloud...

Сквозная аутентификация в Linux: настройка Kerberos, интеграция с браузером и автоматизация через Keytab

Масштабный переход на отечественные ИТ-решения ставит перед системными инженерами и разработчиками задачу глубокого освоения базовых механизмов корпоративной безопасности. В основе современных российских экосистем управления инфраструктурой (таких как ALD Pro на базе Astra Linux) лежит программный комплекс FreeIPA. Главным фундаментом доверия, централизованной авторизации и безопасности в этой экосистеме выступает протокол Kerberos. Его корректное понимание и настройка определяют стабильность работы всех смежных сервисов — от сетевых папок до сложных корпоративных веб-приложений. В этой статье детально разберем «анатомию» Kerberos в среде Linux и покажем, как заставить этот протокол эффективно работать на стыке системного администрирования и веб-разработки. Пройдем полный практический путь, разделенный на несколько логических этапов:

https://habr.com/ru/articles/1036670/

#Kerberos #сквозная_аутентификация #FreeIPA #LDAP #OAuth #беспарольный_вход #ALD_Pro #Astra_Linux #КриптоАРМ_ID #sso

Deploy #FreeIPA Server on Cloud #VPS

Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods.
What is FreeIPA?
FreeIPA (Identity, Policy, Audit) is an open-source identity management solution designed primarily for Linux and Unix environments. It integrates several key identity management services into a centralized, easy-to-manage ...
Continued 👉 https://blog.radwebhosting.com/deploy-freeipa-server-on-cloud-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #hosting #oraclelinux #podman #selfhosting #ident #selfhosted #rockylinux

I should really get rid of #freeipa in my homelab.

I am the only user in it, so it is pretty over kill, and tbh its more effort than its worth.

Rebuilding a replica has never gone smoothly for me, (ie building a new VM) neither has doing upgrades.

That said, I really like it for managing internal DNS, and well... central auth even if it is just for me. 😅

Записки импортозамещенца: как обеспечить централизованную аутентификацию в Linux, серверная часть для SSSD

Привет, Хабр! Меня зовут Никита, и я являюсь инженером ИБ-компании «Экстрим безопасность». В предыдущей статье мы обсудили, что для централизованной аутентификации в Linux чаще всего используют службу SSSD, которая изначально разрабатывалась для FreeIPA, но поддерживает и другие бэкенды. Давайте познакомимся теперь внимательнее со всеми этими возможностями.

https://habr.com/ru/companies/astralinux/articles/1034384/

#linux #freeipa #samba #activedirectory #sssd #импортозамещение #служба_каталога #системное_администрирование #учебный_процесс #astralinux

Deploy #FreeIPA Server on Cloud #VPS Here’s a step-by-step guide to deploy FreeIPA server on cloud VPS, using the latest supported methods. What is FreeIPA? FreeIPA (Identity, Policy, Audit) is an ... Continued 👉 #ident #hosting #rockylinux #podman #selfhosting #oraclelinux #selfhosted

Записки импортозамещенца: как обеспечить централизованную аутентификацию в Linux

Привет, Хабр! Меня зовут Никита, и я из тех, кого принято называть импортозамещенцами. Я работаю в компании-интеграторе по ИБ «Экстрим безопасность», которая помогает заказчикам как с банальным PaperSec'ом, так и в вопросах результативного кибербеза. В нашем арсенале широкий спектр решений: начиная с SecretNet Studio, Dallas Lock, защищённых сетей, и до NGFW и продуктов из экосистемы Positive Technologies. И тем не менее, не смотря на ИБ-шный профиль компании, нам все-таки не удалось увернуться от тотального импортозамеса, который начался в 2022 году.

https://habr.com/ru/companies/astralinux/articles/1023816/

#linux #freeipa #samba #activedirectory #sssd #импортозамещение #служба_каталога #системное_администрирование #учебный_процесс #astralinux

Думаем графами с IPAHound

Всем привет, меня зовут Михаил Сухов, я участник команды PT SWARM. Нам в команде все чаще встречается инфраструктура, построенная на базе альтернативных реализаций службы каталога Microsoft Active Directory. Одной из таких реализаций, заслуженно получившей большое распространение является FreeIPA. В ходе работы с FreeIPA стало очевидно, что можно изучать еще и архитектурные особенности, которые сильно отличаются от AD. Так появился IPAHound — наш аналог BloodHound для FreeIPA. За основу был взят проект BloodHound Legacy с поддержкой PKI. Мы неоднократно использовали IPAHound в своих проектах по поиску уязвимостей. В этой статье я расскажу о нашем инструменте. Также посмотрим на различные способы анализа связей, облегчающие продвижение в FreeIPA.

https://habr.com/ru/companies/pt/articles/1028412/

#ipahound #freeipa #ldap #sudo #selinux #kerberos #pentest #ald pro #bloodhound

Интеграция TOTP в OСSERV (FreeRADIUS + FreeIPA)

В данном руководстве приведена инструкция по внедрению двухфакторной аутентификации (2FA/TOTP) для VPN-доступа на базе OCSERV (OpenConnect Server) в связке с FreeRADIUS и FreeIPA.

https://habr.com/ru/articles/1027944/

#ocserv #freeradius #freeipa #docker #OpenConnect

Ocserv 2FA/OTP (RADIUS + FreeIPA)

В данном руководстве приведена инструкция по внедрению двухфакторной аутентификации (2FA/TOTP) для VPN-доступа на базе ocserv (OpenConnect Server) в связке с FreeRADIUS и FreeIPA.

https://habr.com/ru/articles/1025578/

#freeipa #ocserv #freeradius #radius #docker

Что учесть при эксплуатации ALD Pro: подводные камни, лайфхаки и неочевидные особенности

Привет, Хабр! На связи Александр Усов, системный инженер в K2Tex. В своей предыдущей статье я уже делал подробный обзор фич ALD Pro и их особенностей, с которыми регулярно сталкиваюсь. Сегодня хочу поделиться тем, чему мы учим администраторов заказчиков: как реально эксплуатировать эту систему, а не просто развернуть и оставить на холостом ходу. Разберу, как устроены «расширенные атрибуты» и почему следует избегать одинаковых названий отделов в оргструктуре, какую функциональность ALD Pro унаследовал от FreeIPA, а в чем превзошел, и каким образом эффективнее организовать журналирование событий.

https://habr.com/ru/companies/astralinux/articles/1015410/

#ald_pro #freeipa #activedirectory #группа_астра #служба_каталогов #управление_инфраструктурой #ldap #sudo #групповые_политики #логирование_изменений