It is pity, we need Linux to tun open source software like FreeIPA/IDM. I want to deploy domain at my home lab, but there are only FreeBSDs and Windows (client versions, on desktops and laptops)... I don't want to install Linux.
Me too brother, me too.
Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
61–65 of 65 posts
Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
#62Earlier quoted context omitted.
I don't think it's exactly the same thing as sssd is primarily a cache. You can use pam_krb5 on Linux too. But can you disconnect your FreeBSD laptop and work as normal from cache? I agree that sssd is quite finicky however, and I'd love a simpler alternative.
You are correct, sssd has a ton of features (like basically replicating the entire domain locally and caching passwords so you can roam away from your corp network). If you need those things, you need sssd.
Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
#63Hah, what a coincidence, just started to look into yesterday how do I setup LDAP/OIDC on FreeBSD and today I was going to try FreeIPA or Keycloak. Thanks for sharing.
I also covered Keycloak on FreeBSD in the past - here: - https://vermaden.wordpress.com/2024/03/10/keycloak-on-freebs... Hope that helps. Regards, vermaden
Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
#64Earlier quoted context omitted.
I also covered Keycloak on FreeBSD in the past - here: - https://vermaden.wordpress.com/2024/03/10/keycloak-on-freebs... Hope that helps. Regards, vermaden
Awesome, it definitely helps. I realized I have your blog already bookmarked, I subscribed to the RSS feed now as well :) I am new to FreeBSD and these kind of practical articles are really helpful. Thank you very much for sharing your knowledge with others.
Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
#65The FreeIPA documentation could be made a bit clearer, so many "obsolete" pages showing in search. To my question, does anyone know if FreeIPA now supports integration with Samba including password auth for non domain members? Or is it still limited to Kerberos?