The only alternative I know of that goes close to what FreeIPA does (minus the cert part) is kanidm. It does:
I just noticed they have a beta for multimaster replication, which is nice.
I use it at home. Note, though, that it does not do any hand-holding, and all configuration is done through CLI. Also note, there are docs for the stable or dev branch and there sometimes are big differences between the two.
I mean, it is a bit rough, they’re not at 1.0 yet, also: are you looking at the stable or latest docs? That may be the reason the commands do not match with the docs.
I didn’t have any issues, do you see anything in the logs?
Yeah, sounds like a security feature… I was able to configure Traefik to connect with TLS, verifying the peer certificate.
Yes, it should cover all the use cases you mention!
I use oauth2-proxy as ForwardAuth on Traefik so I can protect apps that do not support OAuth/OIDC login/
I use kanidm with oauth2-proxy. No issues so far, it was pretty easy to set up.
Note that the connection to kanidm needs to be TLS even if you have a reverse proxy!
EDIT: currently using 80MB RAM for two users and three Service Providers.
Hey there! I’m also a fellow Reddit expat, deleted my logins in the day the API limits went into effect.
I’m coming from a long pause in activity, I’m planning to try some SOTA once the weather gets a bit warmer.
I’m the proud owner of a IC-706mk2G with a couple of blown caps (I really hope the FETs are okay) and a bunch of handhelds. 73 de IV3BSI
I also moved away my domains and the ones of the hackerspace I manage, mainly to:
I also use Migadu, they have been great so far!
desec.io for DNS, also great and supported by Traefik for DNS-01 ACME challenge.
Sto seguendo con molto interesse la vicenda Piracy Shield, ma la domanda che mi pongo è: da normale cittadino, seppur tech savvy, come posso fare per combattere tutto questo? Del calcio non mi importa un fico secco, ma di Internet aperto si.
I think you can create a group for friends and a group for family. If you want more separation I think Authentik handles multi-tenancy as well
Mi pare assurdo che le aziende che producono qualcosa non siano responsabili almeno in parte dello smaltimento dell’oggetto in primis, e dell’involucro/imballaggio. La domanda più interessante a questo punto è, se lo so io, è lo sai te, possibile che non sia mai venuto in mente a quelli che hanno la possibilità di fare qualche cambiamento?
Saving this for all my future pro-systemd flames, thank you!
I’m using sops with my GPG key currently.
Avevo visto https://galaxus.eu in giro, ma non ho mai ordinato nulla…
Qualcuno sa se c’è un whitepaper tecnico? La piattaforma è open source?
Molise, Italy, which is a whole region that doesn’t exists!
It’s a bit chaotic, and they try to force you to pay for other stuff in the process, but the prices were not that far off from other registrars. Note that I use DeSEC for the actual nameservers though.
I’ve moved mine to Infomaniak (Switzerland), no complaints so far!
Ottima esperienza, l’abbiamo usato un paio di anni con successo nella mia associazione, ora siamo passati a Tryton, sempre open source ma gestisce anche i soci.
Anche perché, uno “sciopero” sarebbe consegnare scheda nulla, o scheda bianca… alla fine uno non sciopera dal lavoro stando a casa, ma protestando davanti all’azienda, no?