December 5, 2015
After many years of using Using OpenLDAP for User Authentication, and Using Kerberos 5 for Single Sign-On Authentication, it was time to look at FreeIPA as a way of streamlining everything. Important Note: You will want to have FreeIPA on it’s own system (whether this is a …
December 12, 2012
So I’ve been having to deal with some IPA-related bugs in the past little bit, which of course got me thinking that I had no idea what IPA did or how to use it (thankfully I wasn’t responsible for fixing the bugs!). But as I had to deal with this issues to some …
December 10, 2012
The purpose of this article is to detail the configuration of a Kerberos realm for single sign-on authentication. In particular, the document will cover installation and configuration on Red Hat Enterprise Linux 5.3, however it should be relevant enough for any recent Linux …
July 26, 2011
So I had upgraded my wife’s MacBook to Lion and discovered that, once again, Apple screwed around with Kerberos. This seems to be a recurring theme (and not a good one). After quite a bit of fighting and figuring, a few things have been sorted out. Once I’ve got it …
February 23, 2011
Well, I’ve begun the migration and probably picked the hardest machine to start with. One of my goals here was to do a clean migration from a Red Hat Enterprise Linux 5 box to a Red Hat Enterprise Linux 6 box for a specific set of services, and to intentionally have SELinux …
November 11, 2010
This week’s techmail was Kerberos authentication with NFSv4 which looks at how to get more security out of NFS. By using Kerberos. I’m not sure if this is the definition of insane for a home network or not, but since I’ve got Kerberos running here already, I …
November 8, 2009
Missed two mac-related techmails from the previous weeks. The first is Learn to use the improved Snow Leopard Services menu which talks about the OS X 10.6 much overhauled services menu and some of the cool things you can do with it such as making your own Automator actions that …
September 3, 2009
Last month I got Kerberos working quite nicely on my macs, thank-you-very-much. This week Apple wrecked it by making Kerberos an absolute nuisance. It wasn’t bad in OS X 10.5.. a bit annoying to setup but the tools were adequate. In 10.6 they threw away the half-decent GUI …
July 16, 2009
Ok, this time the word “fun” is sarcastic. I had it working this afternoon and couldn’t figure out why it all of a sudden stopped working or… at least… subversion via kerberos. I was getting this error whenever I did a “svn ls …
July 16, 2009
This actually isn’t a sarcastic title, for once. I’m actually having a blast fiddling with Kerberos these last few days. I was put into a position to do some kerberos debugging for work, so had to re-setup a kerberos realm at home to do the testing. Of course, at the …
July 18, 2005
I find LDAP for authentication highly irritating. It’s better than some alternatives, like NIS (haven’t looked at NIS+ so I don’t know how it measures up), but man oh man, it’s a real nuisance sometimes. I wrote that LDAP Authentication piece when there …