Live data from Hacker News

Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

vermaden.wordpress.com

61–65 of 65 posts

Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

#61

It is pity, we need Linux to tun open source software like FreeIPA/IDM. I want to deploy domain at my home lab, but there are only FreeBSDs and Windows (client versions, on desktops and laptops)... I don't want to install Linux.

Me too brother, me too.

Next pressure point to install Linux: UniFi controller becomes huge container for Docker, not Java application which can be run anywhere.

Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

#62
post #39

Earlier quoted context omitted.

I don't think it's exactly the same thing as sssd is primarily a cache. You can use pam_krb5 on Linux too. But can you disconnect your FreeBSD laptop and work as normal from cache? I agree that sssd is quite finicky however, and I'd love a simpler alternative.

You are correct, sssd has a ton of features (like basically replicating the entire domain locally and caching passwords so you can roam away from your corp network). If you need those things, you need sssd.

It is a quite normal need. An always-on laptop that doesn't leave the corporate network is just a stationary computer in inconvenient packaging.

Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

#63
post #5

Hah, what a coincidence, just started to look into yesterday how do I setup LDAP/OIDC on FreeBSD and today I was going to try FreeIPA or Keycloak. Thanks for sharing.

I also covered Keycloak on FreeBSD in the past - here: - https://vermaden.wordpress.com/2024/03/10/keycloak-on-freebs... Hope that helps. Regards, vermaden

Awesome, it definitely helps. I realized I have your blog already bookmarked, I subscribed to the RSS feed now as well :) I am new to FreeBSD and these kind of practical articles are really helpful. Thank you very much for sharing your knowledge with others.

Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

#64
post #5

Earlier quoted context omitted.

I also covered Keycloak on FreeBSD in the past - here: - https://vermaden.wordpress.com/2024/03/10/keycloak-on-freebs... Hope that helps. Regards, vermaden

Awesome, it definitely helps. I realized I have your blog already bookmarked, I subscribed to the RSS feed now as well :) I am new to FreeBSD and these kind of practical articles are really helpful. Thank you very much for sharing your knowledge with others.

Thanks.

Re: Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

#65

The FreeIPA documentation could be made a bit clearer, so many "obsolete" pages showing in search. To my question, does anyone know if FreeIPA now supports integration with Samba including password auth for non domain members? Or is it still limited to Kerberos?

It does, now running. Glad to be able to replace my Samba4 setup since we're now mostly Mac/Linux only.
Post reply on HN