home.social

#keycloak — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #keycloak, aggregated by home.social.

  1. Rad Web Hosting @[email protected] ·

    Complete Identity and Access Management Deployment on #Ubuntu #VPS

    This article discusses how to achieve a complete identity and access management deployment on Ubuntu VPS.

    Here’s a complete, start-to-finish procedural guide that integrates everything we’ve built — from deploying #ApacheDS through LDAPS, SSSD logins, self-service portal, automation, #Keycloak ...
    Continued 👉 blog.radwebhosting.com/complet #grafana #selfhosted #identitymanagement #idp #loki #ldap #promtail #selfhosting #opensource

    #ubuntu #vps #apacheds #keycloak #grafana #selfhosted
  2. Rad Web Hosting @[email protected] ·

    Complete Identity and Access Management Deployment on #Ubuntu #VPS

    This article discusses how to achieve a complete identity and access management deployment on Ubuntu VPS.

    Here’s a complete, start-to-finish procedural guide that integrates everything we’ve built — from deploying #ApacheDS through LDAPS, SSSD logins, self-service portal, automation, #Keycloak ...
    Continued 👉 blog.radwebhosting.com/complet #grafana #selfhosted #identitymanagement #idp #loki #ldap #promtail #selfhosting #opensource

    #ubuntu #vps #apacheds #keycloak #grafana #selfhosted
  3. Rad Web Hosting @[email protected] ·

    Complete Identity and Access Management Deployment on #Ubuntu #VPS

    This article discusses how to achieve a complete identity and access management deployment on Ubuntu VPS.

    Here’s a complete, start-to-finish procedural guide that integrates everything we’ve built — from deploying #ApacheDS through LDAPS, SSSD logins, self-service portal, automation, #Keycloak ...
    Continued 👉 blog.radwebhosting.com/complet #grafana #selfhosted #identitymanagement #idp #loki #ldap #promtail #selfhosting #opensource

    #ubuntu #vps #apacheds #keycloak #grafana #selfhosted
  4. Daily CyberSecurity @[email protected] ·

    A Keycloak account takeover flaw, CVE-2026-18963, lets attackers reset any user's password with no email verification. Update to 26.7.2 now.

    #Keycloak #AccountTakeover #CVE #IAM #InfoSec #RedHat

    securityonline.info/keycloak-a

    #keycloak #accounttakeover #cve #iam #infosec #redhat
  5. Habr @[email protected] ·

    Как мы перестали выдавать dev-VM вручную и собрали self-service на KubeVirt

    Разработчикам регулярно требовались виртуальные машины, но self-service не существовал. Образ, ресурсы, сеть и доступы настраивала инфраструктурная команда. По отдельности операции были несложными, но в сумме пользователи ждали, а инженерное время уходило на повторяемую ручную работу. Так появился внутренний dev cloud на KubeVirt. Разработчик сам создаёт VM из поддерживаемого шаблона, управляет lifecycle и портами, меняет ресурсы, смотрит Events, метрики и serial-консоль. Платформа сохраняет контроль над доступами, шаблонами, бюджетами команд и ёмкостью нод. В статье показано как на базе KubeVirt получился цельный внутренний продукт с минимальными трудозатратами, в котором разработчик действует самостоятельно, а платформа сохраняет контроль над dev-контуром и блокирует создание VM сверх бюджета команды.

    habr.com/ru/articles/1064376/

    #kubernetes #kubevirt #devops #virtualization #selfservice #go #devcloud #keycloak

    #keycloak #devcloud #go #selfservice #virtualization #devops
  6. Kevin Veen-Birkenbach @[email protected] ·

    WHERE OTHERS LOSE CONTROL – WE STAY IN THE LOOP.

    At Infinito.Nexus, we believe that AI should never replace human judgment. We are the captains. AI is our navigator. While others hand over responsibility to black-box systems, we stay in control. We design the architecture, review the code, verify every deployment, and make the decisions that shape the future of the systems we build. AI is one of the most powerful tools ever created. But it remains a tool. We are the engineers, architects, and craftsmen who use it to build sovereign digital infrastructure faster, more reliably, and at a scale that was impossible only a few years ago. […]

    blog.infinito.nexus/blog/2026/

    #aiagents #aiautomation #aicopilot #aigovernance #aiinfrastructure #aiplatform
  7. Kevin Veen-Birkenbach @[email protected] ·

    WHERE OTHERS LOSE CONTROL – WE STAY IN THE LOOP.

    At Infinito.Nexus, we believe that AI should never replace human judgment. We are the captains. AI is our navigator. While others hand over responsibility to black-box systems, we stay in control. We design the architecture, review the code, verify every deployment, and make the decisions that shape the future of the systems we build. AI is one of the most powerful tools ever created. But it remains a tool. We are the engineers, architects, and craftsmen who use it to build sovereign digital infrastructure faster, more reliably, and at a scale that was impossible only a few years ago. […]

    blog.infinito.nexus/blog/2026/

    #aiagents #aiautomation #aicopilot #aigovernance #aiinfrastructure #aiplatform
  8. Kevin Veen-Birkenbach @[email protected] ·

    Infinito.Nexus und der Deutschland-Stack: Digitale Souveränität in der Praxis

    Der Begriff Deutschland-Stack taucht im Koalitionsvertrag auf – allerdings ohne klare technische Ausgestaltung. Schleswig-Holstein hat diese Lücke geschlossen: Mit einem Impulspapier vom 12. August 2025 hat das Land zentrale Prinzipien formuliert und seine Unterstützung bei der Umsetzung angeboten (schleswig-holstein.de). Hier findest du das Impulspapier auf dem offiziellen Portal des Landes Schleswig-Holstein:→ Impulspapier zum Deutschland-Stack veröffentlicht – Schleswig-Holstein (12. 08. 2025) […]

    blog.infinito.nexus/blog/2025/

    #collabora #deutschland #deutschlandstack #digitalesouveranitat #discourse #egovernment
  9. Seth Grover @[email protected] ·
    CW: Release notes for v25.03.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring

    This has been a busy month for Malcolm! I pushed hard to get v25.03.0 out earlier this month, as it contained pretty much just the Keycloak integration one of our partners (and major funding sources) was waiting for. Rather than wait until April for the other stuff that would have gone into the regular end-of-the-month release, I decided to pull those items into this smaller release just a week and a half after the last one.

    Malcolm v25.03.1 contains a few enhancements, bug fixes, and several component version updates, including one that addresses a CVE that may affect Hedgehog Linux Kiosk mode and Malcolm's API container.

    NOTE: If you have not already upgraded to v25.03.0, read the notes for v25.02.0 and v25.03.0 and follow the Read Before Upgrading instructions on those releases.

    Changes in this release

    • ✨ Features and enhancements
      • Incorporate new S7comm device identification log, s7comm_known_devices.log (#622)
      • Display current PCAP, Zeek, and Suricata capture results in Hedgehog Linux Kiosk mode (#566)
      • Keycloak authentication: configurable group or role membership restrictions for login (#633) (see Requiring user groups and realm roles)
      • Mark newly-discovered and uninventoried devices in logs during NetBox enrichment (#573)
      • Added "Apply recommended system tweaks automatically without asking for confirmation?" question to install.py to allow the user to accept changes to sysctl.conf, grub kernel parameters, etc., without having to answer "yes" to each one.
    • ✅ Component version updates
    • 🐛 Bug fixes
      • Fix install.py error when answering yes to "Pull Malcolm images?" with podman (#604)
      • Order of user-provided tags from PCAP upload interface not preserved (#624)
    • 📄 Configuration changes (in environment variables in ./config/) for Malcolm and in control_vars.conf for Hedgehog Linux
    • 🧹 Code and project maintenance
      • Ensure Malcolm's NetBox configuration Python scripts are baked into the image in addition to bind-mounting them in docker-compose.yml at runtime.

    Malcolm is a powerful, easily deployable network 🖧 traffic analysis tool suite for network security monitoring 🕵🏻‍♀️.

    Malcolm operates as a cluster of containers 📦, isolated sandboxes which each serve a dedicated function of the system. This makes Malcolm deployable with frameworks like Docker 🐋, Podman 🦭, and Kubernetes ⎈. Check out the Quick Start guide for examples on how to get up and running.

    Alternatively, dedicated official ISO installer images 💿 for Malcolm and Hedgehog Linux 🦔 can be downloaded from Malcolm's releases page on GitHub. Due to limits on individual files in GitHub releases, these ISO files have been split 🪓 into 2GB chunks and can be reassembled with scripts provided for both Bash 🐧 (release_cleaver.sh) and PowerShell 🪟 (release_cleaver.ps1). See Downloading Malcolm - Installer ISOs for instructions.

    As always, join us on the Malcolm discussions board 💬 to engage with the community, or pop some corn 🍿 and watch a video 📼.

    #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #SSO #OIDC #Keycloak #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov

    #malcolm #hedgehoglinux #zeek #arkime #netbox #opensearch
  10. Seth Grover @[email protected] ·
    CW: Release notes for v25.03.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring

    Malcolm v25.03.0 adds 🔐 authentication via Keycloak and all that entails: single sign-on (SSO), identity providers, federation of LDAP/Kerberos servers, and more! Malcolm can connect to an existing Keycloak server or it can use its own embedded Keycloak instance. This release also includes a few component version updates.

    Please read the release notes from this release and from v25.02.0 for some things to check prior to updating.

    Malcolm is a powerful, easily deployable network 🖧 traffic analysis tool suite for network security monitoring 🕵🏻‍♀️. Check out the Quick Start guide for examples on how to get up and running.

    As always, join us on the Malcolm discussions board 💬 to engage with the community, or pop some corn 🍿 and watch a video 📼.

    #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #SSO #OIDC #Keycloak #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov

    #malcolm #hedgehoglinux #zeek #arkime #netbox #opensearch