4 ms·
FreeIPA (https://www.freeipa.org/page/Main_Page https://www.freeipa.org/page/Main_Page) is an LDAP+Kerberos+other stuff implementation which is available in the
by kwk1 10y ago
FreeIPA (https://www.freeipa.org/page/Main_Page https://www.freeipa.org/page/Main_Page) is an LDAP+Kerberos+other stuff implementation which is available in the Ubuntu repositories and is probably a good target for this. If it was easier to set up, I think it would become apparent to more people that it is useful outside the enterprise.
For example, if you have a laptop and a desktop, you can set up SSO and an NFS automounted home directory, so you don't need to maintain two (or N) home directories/sets of dotfiles/etc at the same time.
- mschuster91 10y ago> For example, if you have a laptop and a desktop, you can set up SSO and an NFS automounted home directory, so you don't need to maintain two (or N) home directories/sets of dotfiles/etc at the same time. Good luck with unstable network connections. NFS is already enough of a PITA in a fixed office network, much less over e.g. a spotty Wifi. Also you will need a VPN because you don't want to expose raw NFS to the Internet.
- e12e 10y agoI've wondered if maybe zfs send/receive might be press-ganged into working as a substitute for coda/"magically cached nfs"... [ed: In fact I wonder if we (the community) shouldn't be able to bundle up a usable ssh server with less features, protocol 2 only, a great easy-to-use CA, maybe some bonjour/dns srv convention, and some simple db (perhaps ldap is easiest, sigh) and pair that up with ZFS for a minimal, but great, identity-of-user, identity-of-server/daemon cached/networked/encrypted data...]
- kwk1 10y agoYup, all that's true--but just because I mentioned a laptop doesn't mean I'm necessarily talking about an in-network, out-of-network situation.
- mschuster91 10y agoEven in-network can get nasty very soon when you introduce wifi into the mix or have an overloaded switch between the client and the server.