Recent content in Techwolf12 Home on Techwolf12
Authenticate Wi-Fi users against Google Workspace with FreeRADIUS: Secure LDAP across multiple domains, per-office and per-group VLAN assignment, EAP over TLS, and access points on dynamic IPs verified through authoritative DNS.
Imagine waking up to an alert that your Google Account password has been changed. You haven’t been standard-hacked. You’ve been trapped in the Family Link Exploit, a severe security loophole that weaponizes Google’s child safety features against adult users, and currently leaves victims completely stranded.
Welcome to this practical guide filled with MySQL tips and tricks! Whether you’re a seasoned database administrator or just getting started with MySQL, these handy queries and techniques will help you manage your databases more efficiently.
We covered SSH Authentication and Linux user management using OpenLDAP in an article, now wouldn’t it be great if you could also manage sudo rules from a central place like an LDAP server? Luckily, sudo has support for this! This article will show you how to set this up within OpenLDAP and the sudo configuration on your Linux machine.
Reverse SSH tunneling is a powerful tool that can be used to securely forward ports to or from remote servers to your local machine. It is especially useful when you don’t have direct access to a remote server, such as in a cloud environment. By creating a secure tunnel between the remote server and your local machine, you can access services on the remote server as if they were running on your…
A GPG Keysigning party is an event where people verify each other’s identity and sign their GPG keys. Doing so increases the effectiveness of the Web of trust and the total trust each key has.
I was thinking about migrating some cloud services into Terraform, but we seemed to have too many domains. So I wrote a small python script that takes a domain, then using doctl (the DigitalOcean command line) it extracts all current records. After that it outputs the file into tf and also gives a import command to import the current state in Terraform state.
Watermeterkit is an awesome idea to count water usage on most Dutch watermeters. With these steps, it would be easy to add into Home Assistant to show usage in liters or m³.
Using a GoPro as a stream source over Wi-Fi? What about streaming from SLOBS to two Twitch channels at once? Having a dedicated recording machine? Streaming to multiple platforms? Maybe even host a LAN party with a commentary stream? You can use RTMP and a custom ingest for streaming. This way you are able to accomplish what you want. In this article, I will guide the setup and show examples for…
The Anytone D878UV is quite a nice DMR (Digital Mobile Radio) capable radio packed with features like APRS (Reporting only), Bluetooth and GPS. It’s no surprise that this is my favourite DMR radio and I can recommend it if you are getting started with DMR for the first time. This post will help you get DMR up and running on your Anytone D878UV.
BGP stands for Border Gateway Protocol, more commonly known as the system that keeps the internet (and by definition, routing) working correctly. Sometimes misconfigurations (Like accidentally announcing a wrong prefix) can break the internet. In this blog post, I will explain BGP Hijacking and how to prevent it. Primarily for people without network experience.
This document will get you step by step through the generation of a GPG smartcard key, with the correct subkeys for use on a smartcard like OpenPGP smartcard or the Yubikey. This will also allow you to use your GPG Authentication subkey for SSH support.
The following script takes a Bind9 zonefile, gets all AAAA records from it and generated PTR records based on them.
When you run an LDAP server you want to use it to authenticate as much as possible using this system, either to comply with security policies or make it easier for users to login using one authentication method. If you use the Apache2 webserver you can setup HTTP Basic authentication with LDAP. In this tutorial I will show how I accomplished this.
Thanks to the new VPC functionality in DigitalOcean can be used to provide Kubernetes with a static external IPv4. This can be handy in cases where you need to deal with IP whitelists, for example, if you use your Kubernetes cluster as a CI building tool. However, this requires some config setup and a privileged pod running on each node to automatically update the routes. This article will help…
So you got an OpenLDAP server running? Great! Now you want to connect it to as many systems as possible to ease the burden of managing users and authorization. However, you also want to allow SSH key authorisation managed via a central place. Can LDAP be used for this? This article will help you get started to set this up in your organisation.