Categories
Encryption Filesystem Kerberos Linux NFS

Ubuntu 24.04.1 upgrade and NFS/krb5 problems

After upgrading my Ubuntu 22.04 installation to Ubuntu 24.04.1 (using do-release-upgrade) my NFS exports stopped working. Kernel 6.8.0-41 reported an OOPS as soon as the NFS share was accessed (using sec=krb5b on the NFS client): Looking for a similar bug I found one on the NFS kernel mailing list titled “[PATCH] SUNRPC: Fix loop termination […]

Categories
Directory Service Kerberos LDAP Linux

Joining Ubuntu client to Active Directory

…or to be exact: the Samba version of it 🙂 So as an Open Source guy I obviously don’t run a Microsoft Active Directory. However since Samba version 4 this software does not only support file and print services, it also can act as an Active Directory. And guess what: That’s what I do. Unfortunately […]

Categories
Kerberos Linux SSO

Fun with Kerberos – WIP

Today I changed some things regarding authentication in my local setup and (once again) was curious about enabling more services to user kerberos logins. And – as always – I ended up in an extensive debug session in order to make (some) things work. To spare some of you some of your precious time I’ll […]

Categories
IdP Kerberos Keycloak Linux Shibboleth Simplesamlphp SingleSignOn SSO

Single Sign On (SSO) with Keycloak

I’ve been running SAML based SSO using Simplesamlphp for some time now. While its PHP based approach is very flexible (and configuration is easy compared to Java-based Shibboleth) there are still quite some things you need to know to get started. Keycloak is an alternative that’s not as flexible to use (as far as I’ve […]