snuxoll

47 ms·

511.
by snuxoll 7y ago
What help are you specifically needing?
512.
by snuxoll 7y ago
> Can keycloak let me integrate different k8s clusters running in Azure/Google/AWS with i.e.: Azure AD ? All our users have accounts in Azure AD but we would like to let them use k8s clusters running in different cloud provider
513.
by snuxoll 7y ago
Simple attributes can be added easily (it's as simple as adding form fields with an id of `user.attribute.company`), but anything requiring access restrictions (only an admin can update, for example) will require custom development. Th
514.
by snuxoll 7y ago
> It works with Hasura out of the box, you just can't set the x-hasura-default-role jwt claim dynamically and thus it has to be hardcoded. Completely incorrect. There's numerous ways you can handle setting a claim in Keycloak,
515.
by snuxoll 7y ago
> The second option seems interesting! Theming wouldn't help, my app is waaaay different from an old-style themed template (server-side rendering, client-side ClojureScript, websockets, etc). Well, since we are talking SAML or OIDC
516.
by snuxoll 7y ago
I wrote the comment you cited :) IdentityServer certainly has better documentation for its extension points at the moment, but the tradeoff is you have to build everything yourself. Keycloak comes with a built in admin UI, account managem
517.
by snuxoll 7y ago
Setting up OpenLDAP or 389ds and integrating Keycloak with it is hardly rocket science - no need to reinvent the wheel.
518.
by snuxoll 7y ago
Keycloak links federated identities to its own user accounts, users can do this manually from the account management UI or it can automatically link them by email when a user signs in with a new IdP. No configuration beyond setting up the f
519.
by snuxoll 7y ago
IdentityServer is a framework to roll your own IdP, it’s not fully functional out of the box like Keycloak.
520.
by snuxoll 7y ago
Absolutely. You can setup multiple realms in Keycloak to isolate tenants from each other, and beyond the built in admin UI you can access all of the configuration over a REST API to build you own admin tools if needed.
521.
by snuxoll 7y ago
It’s highly integrated with Wildfly (or JBoss EAP for the commercial product), so if you’re not deploying it with the Docker images expect to have fun dealing with the special hell that is Java application servers - setting up infispan an
522.
by snuxoll 7y ago
Upstream of Red Hat SSO, Red Hat IdM is the commercial product based on FreeIPA.
523.
by snuxoll 7y ago
Nod to Keycloak / Red Hat SSO here, it’s my goto solution for dealing with identity these days.
524.
by snuxoll 7y ago
> And to this day I find junior devs struggle with the same things unless they have a maven/gradle project all set up for them. Personally I’m still shocked that learning the common build tools for whatever language is used for a CS
525.
by snuxoll 7y ago
> And costing them some CPU On the servers that have no purpose in life but to handle caching. I’d much rather browsers and scrapers alike hit my Apache Trafficserver instances with requests needing to return a Not Modified than wasting
526.
by snuxoll 7y ago
Boise, ID - the only one we had closed down some time ago.
527.
by snuxoll 7y ago
WASM doesn’t have access to the DOM which really limits use cases.
528.
by snuxoll 7y ago
I’m talking more along the lines of “hr user logs in, now you need to SET ROLE for the request and make absolutely sure RESET ROLE is called when the connection goes back to the pool”. A lot of frameworks make this harder than it needs to b
529.
by snuxoll 7y ago
> If you are using a relational database to its full extent, there is nothing as secure as built in row level security. You wouldn't dream of doing integrity checks outside the database, why do security? This isn’t exactly PostgreSQ
530.
by snuxoll 7y ago
Might take a look at the native systemd-machined if you want full blown OSE’s.
531.
by snuxoll 7y ago
As a creator I love Maven for that same reason, I appreciate having a defined structure for my project that makes it easy for anybody on a team to pick it up without needing to navigate a build script of arbitrary complexity.
532.
by snuxoll 7y ago
Not just vehicles, anything - the Magnuson-Moss Warranty Act does not discriminate.
533.
by snuxoll 7y ago
Ditto with the the other Java EE API’s GP mentioned, their interfaces are available on Maven Central instead of being bundled in the JDK - which makes sense as Java EE is not actually a thing anymore and the Eclipse Foundation took over as
534.
by snuxoll 7y ago
> Still don't want to build a pecl extension. Docker? Build it as a system (RPM/DEB) package? Man, my life would be difficult if I just flat out refused to use packages for PHP/Python/Ruby requiring native extensions
535.
by snuxoll 7y ago
If somebody breaks into a specific service and is able to dump hashed passwords it’s very likely they also had access to TOTP keys. Since you’re already using a password manager you should be protected from password reuse. Ultimately in thi
536.
by snuxoll 7y ago
> Reason: A lot of the places PHP is deployed, you can't compile C code or install binary dependencies (.so, .dll files). You can't access the OS package manager, either. If you’re in the target audience for msgpack you probabl
537.
by snuxoll 7y ago
Agreed, if you run FreeNAS at home you are likely to be subscribed to /r/homelab. That’s not to say it’s impossible for a non-technical user to deploy and manage it, but it will have a learning curve consumer and prosumer gear doe
538.
by snuxoll 7y ago
Sophos still stays squarely in the security space at least, I wouldn’t exactly call them a behemoth. Now Cisco on the other hand, god damned they have their mitts in everything and most of it’s trash. But nobody got fired for buying Cisco,
539.
by snuxoll 7y ago
iLO is available with an optional kit, though honestly you'd be better off getting the ML30 if you were buying HPE gear for a remote location.
540.
by snuxoll 7y ago
The Xeon E3-1270's in my R210 II's are 80W TDP, the Xeon E5-2450L's I have loaded in my R320 and R420 are 70W - guess which makes more noise? The 2450L's, of course! TDP is a guideline for cooling, it says nothing about

More ›