Posts
All the articles I've posted.
Keycloak Container Set
Updated:Single Sign On from a simple docker container set. The container might be simple but the complexities of OAuth2, SAML and identity services are far from st
MediaWiki and OAuth2
Updated:With a move to a more joined up authentication using Single Sign On (SSO) I deployed a Keycloak service in a docker container - that should probably form p
SMTP Ciphers
Updated:What ciphers are used by your smtp server? Well that's a question I got asked today. Take a look at this testssl.sh - it spawned a whole report about my SM
FreeRADIUS and Docker
Updated:Today I built a FreeRADIUS server within a Docker container set using docker-compose. As we only have a small number of users on the WiFi system it was set
Central Logging
Updated:System logging should not remain a local activity. If you find your system has been compromised often the first thing in the attackers mind is to stop it f
Lynis Security Auditing
Updated:In the days of corporate lore I faced system hardening challenges driven by Nessus. Now because Nessus isn't FOSS (Free Open Source Software) it's not some
SSH, OATH OTP and LDAP
Updated:I got myself into a bit of a knot with this one. We wanted multi-factor authentication setup on the main SSH gateway and that meant private key, password A
Resetting the Root Password
Updated:I had to go through an exercise of accessing a number of a clients servers and reset the root password. They didn't have it documented anywhere and couldn'
One Time Password and SSHD
Updated:I made a bit of a fool of myself suggesting that we add a free means of securing our external SSH gateway by using Google Authenticator. My boss simply tur
mod_http_upload and CORS
Updated:Putting together a container set with movim and ejabberd I ran into CORS (Cross Origin Resource Sharing). I'm using the default upload url https://@HOST@/u