Blog

• Yubikey Key Vulnerability - How It Affects You
• OpenSUSE on ZFS
• Linux Filesystems
• Reproducible Builds
• MacOS PIV Setup Guide
• Passkeys: A Shattered Dream
• XZ
• SSH Key Authentication Basics
• Webauthn Attestation and OpenSource Keys
• Getting Started with PKCS11
• SSH Key Storage Comparison
• Starting with Rage on OpenSUSE
• Using a TPM for SSH keys on OpenSUSE Tumbleweed
• How Hype Will Turn Your Security Key Into Junk
• Why are PBKDF2-SHA256 and PBKDF2_SHA256 different in 389-ds?
• Why Decentralised ID Won't Work
• Where to start with linux authentication?
• Exploring Webauthn Use Cases
• Enable caBLE on your iPhone for testing
• Documentation PR's Welcome - Why Docs Are Not A Beginner Friendly Task
• How CTAP2.0 made UserVerification even more confusing
• Nextcloud - Unable to Open Photos Library
• Transactional Operations in Rust
• Results from the OpenSUSE 2021 Rust Survey
• Gnome 3 compare to MacOs
• StartTLS in LDAP
• Getting started with Yew
• Compiler Bootstrapping - Can We Trust Rust?
• Open Source Enshrines the Wrong Privilege
• Time Machine on Samba with ZFS
• Against Packaging Rust Crates
• Getting Started Packaging A Rust CLI Tool in SUSE OBS
• Webauthn UserVerificationPolicy Curiosities
• Rust, SIMD and target-feature flags
• Deploying sccache on SUSE
• How a Search Query is Processed in Kanidm
• Using SUSE Leap Enterprise with Docker
• Windows Hello in Webauthn-rs
• User gesture is not detected - using iOS TouchID with webauthn-rs
• docker buildx for multiarch builds
• Developer Perspective on Docker
• virt-manager missing pci.ids usb.ids macos
• Resolving AirPlayXPCHelper Perr NULL kCanceledErr with Apple TV and MacOS
• Building containers on OBS
• 389ds in containers
• APFS (why is df showing me funny numbers?!)
• USG fixing avahi
• Fedora 32 Wallpaper Submission - Story
• Fixing a MacBook Pro 8,2 with dead AMD GPU
• There are no root causes
• Concurrency 1: Types of Concurrency
• Concurrency 2: Concurrently Readable Structures
• Packaging and the Security Proposition
• Packaging, Vendoring, and How It's Changing
• Fixing opensuse virtual machines with resume
• Password Quality and Badlisting in Kanidm
• Rust 2020 - helping to get rust deployed
• Recovering LVM when a device is missing with a cache pool lv
• Upgrading OpenSUSE 15.0 to 15.1
• Announcing Kanidm - A new IDM project
• OpenSUSE leap as a virtualisation host
• LDAP Filter Syntax Validation
• Using ramdisks with Cargo
• CPU atomics and orderings explained
• I no longer recommend FreeIPA
• Using 389ds with docker
• Implementing Webauthn - a series of complexities ...
• The Case for Ethics in OpenSource
• Using Rust Generics to Enforce DB Record State
• Debugging MacOS bluetooth audio stutter
• GDB autoloads for 389 DS
• Programming Lessons and Methods
• Meaningful 2fa on modern linux
• Using the latest 389-ds on OpenSUSE
• Structuring Rust Transactions
• SUSE Open Build Service cheat sheet
• The idea of CI and Engineering
• Useful USG pro 4 commands and hints
• Nextcloud and badrequest filesize incorrect
• Identity ideas ...
• Work around docker exec bug
• High Available RADVD on Linux
• Rust RwLock and Mutex Performance Oddities
• Photography - Why You Should Use JPG (not RAW)
• Extracting Formally Verified C with FStar and KreMLin
• AD directory admins group setup
• Understanding AD Access Control Entries
• Making Samba 4 the default LDAP server
• Smartcards and You - How To Make Them Work on Fedora/RHEL
• Using b43 firmware on Fedora Atomic Workstation
• Creating yubikey SSH and TLS certificates
• What's the problem with NUMA anyway?
• GSoC 2017 - Mentor Report from 389 Project
• So you want to script gdb with python ...
• Time safety and Rust
• indexed search performance for ds - the mystery of the and query
• TLS Authentication and FreeRADIUS
• Kerberos - why the world moved on
• Custom OSTree images
• Your Code Has Impact
• CVE-2017-2591 - DoS via OOB heap read
• LCA2017 - Getting Into the Rusty Bucket
• The next year of Directory Server
• Usability of software: The challenges facing projects
• State of the 389 ds port, 2017
• Openshift cluster administration
• The minssf trap
• The mysterious crashing of my laptop
• What's new in 389 Directory Server 1.3.5 (unofficial)
• Block Chain for Identity Management
• Can I cycle through operators in C?
• tracking down insane memory leaks
• GDB: Using memory watch points
• lock free database
• Zero Outage Migration Of Directory Server Infrastructure
• Acis for group creation and delegataion in DS
• systemd is not monolithic
• 389ds on freebsd update
• The future vision of 389-ds
• Disabling journald support
• Enabling the 389 ds nightly builds
• 389 ds aci linting tool
• Trick to debug single files in ds
• Blog migration
• ldctl to generate test objects
• Patches Welcome
• Failed to delete old semaphore for stats file
• Securing IPA
• 389 on freebsd
• Renaming ovirt storage targets
• Running your own mailserver: Mailbox rollover
• FreeRADIUS: Using mschapv2 with freeipa
• db2index: entry too large (X bytes) for the buffer size (Y bytes)
• Load balanced 389 instance with freeipa kerberos domain.
• Debbuging and patching 389-ds.
• ns-slapd access log notes field
• The hidden log features of ns-slapd
• Where does that attribute belong?
• Ldap post read control
• Magic script for post install interface configuration
• python gssapi with flask and s4u2proxy
• Managing replication conflicts for humans in 389
• Securing RHEL - CentOS - Fedora
• KRB5 setup for ldap server testing
• Debugging 389ds tests
• mod selinux on rhel7
• Ovirt with ldap authentication source
• Spamassasin with postfix
• SSH keys in ldap
• FreeIPA: Giving permissions to service accounts.
• OpenBSD relayd
• OpenBSD BGP and VRFs
• OpenBSD nat64
• Unit testing LDAP acis for fun and profit
• PPP on OpenBSD with Internode
• Fabric starting guide
• Render errors on websites
• NSS-OpenSSL Command How to: The complete list.
• Linux remote desktop from GDM
• Akonadi mariadb on ZFS
• MBP b43 wireless
• Changing SSSD cert
• Virtual hosted django
• Steam Linux Beta on Fedora 18 (x86 64 or x86)
• NSS commands and how to
• Slow mac sleep
• Samba 4 Internal DNS use
• Mod Selinux with Django
• SEPGSQL - How to Fedora 16 - 17
• DHCP6 server
• Mod auth cas
• SELinux for postfix + dovecot