VirtualTam's bookmarks

201. scipag/vulscan: Advanced vulnerability scanning with Nmap NSE 2017-11-29

     tags: network, network/nmap, scanner, security, service

     [ permalink ]
202. Portus - Authorization service and user interface for the next generation Docker Registry 2017-11-06

     tags: image, linux/container, linux/container/docker, programming/ruby, repository, security/authentication, web

     [ permalink ]

     • https://github.com/SUSE/Portus
203. A Mailserver on Ubuntu 16.04: Postfix, Dovecot, MySQL – Ex Ratione 2017-11-05

     tags: antivirus, email, email/dovecot, email/postfix, linux, security, spamassassin

     [ permalink ]
204. WebGoat/WebGoat: A deliberately insecure Web Application 2017-11-03

     tags: hack, leak, owasp, programming/java, security, web

     [ permalink ]
205. WireGuard: fast, modern, secure VPN tunnel 2017-11-02

     tags: mobile/android, network, network/vpn, network/vpn/wireguard, privacy, security

     [ permalink ]

     • https://git.zx2c4.com/WireGuard
     • https://github.com/WireGuard/WireGuard (mirror)
     • https://www.reddit.com/r/linux/comments/6owk5x/formal_verification_of_the_wireguard_protocol/
     • https://www.reddit.com/r/haskell/comments/6nv1n2/wireguard_vpn_just_got_formally_verified_with/
     • https://www.xda-developers.com/wireguard-vpn-project-support-android-roms/
     • https://mirror.as35701.net/video.fosdem.org/2017/Janson/wireguard.mp4
     • https://archive.fosdem.org/2017/schedule/event/wireguard/
     • https://eprint.iacr.org/2018/080
     • https://wiki.archlinux.org/index.php/WireGuard
     • https://bbs.archlinux.org/viewtopic.php?id=231469
206. Playing HTTP Tricks with Nginx | Elastic 2017-10-09

     tags: network/http, network/http-server/nginx, observability/elastic, observability/elastic/elasticsearch, observability/elastic/kibana, security, security/authentication

     [ permalink ]

     The X-Pack plugin comes with a subscription plan and a 30-day trial license:

     • https://www.elastic.co/subscriptions
     • https://www.elastic.co/guide/en/x-pack/current/license-expiration.html
     • https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/7

     Once the license has expired, a number of features become unavailable, among which is user management (authentication, authorization).

207. Generate Mozilla Security Recommended Web Server Configuration Files 2017-10-09

     tags: apache, cipher, network/http, network/http-server/nginx, network/transport-layer-security, security, server

     [ permalink ]

     • https://github.com/mozilla/server-side-tls
     • https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
     • https://security.stackexchange.com/questions/51680/optimal-web-server-ssl-cipher-suite-configuration
     • https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
208. Free Open Source Password Manager | bitwarden 2017-10-02

     tags: security/password, web

     [ permalink ]
209. StackExchange/blackbox: Safely store secrets in Git/Mercurial/Subversion 2017-10-02

     tags: cryptography/encryption, cryptography/pgp, gpg, privacy, security/password

     [ permalink ]
210. PHP | gzinflate and empty files 2017-09-23

     tags: archive, compression/tar, programming/php

     [ permalink ]

     • https://secure.php.net/manual/en/function.gzinflate.php
     • https://bugs.php.net/bug.php?id=71395
     • https://stackoverflow.com/questions/27692527/why-phps-gzuncompress-function-can-go-wrong
211. Red Hat Directory Server - Chapter 14. Managing Replication 2017-09-20

     tags: 389-ds, linux, linux/centos, linux/red-hat, network/ldap, network/transport-layer-security, replication, security/authentication

     [ permalink ]

     • http://directory.fedoraproject.org/docs/389ds/howto/howto-replicationmonitoring.html
     • http://directory.fedoraproject.org/docs/389ds/howto/howto-walkthroughmultimasterssl.html
     • http://www.port389.org/docs/389ds/FAQ/faq.html#how-does-the-389-multi-master-replication-work
212. How To Set Up Centralized Linux Authentication with FreeIPA on CentOS 7 | DigitalOcean 2017-09-20

     tags: 389-ds, cryptography/certificate, linux, linux/centos, linux/red-hat, network/dns, network/ldap, security/authentication, single-sign-on

     [ permalink ]

     • https://www.freeipa.org/page/HowTos
213. LDAP - OpenLDAP or 389 DS? : linuxadmin 2017-09-20

     tags: 389-ds, kerberos, linux, linux/centos, network/ldap, security/authentication, single-sign-on

     [ permalink ]
214. Project Everest 2017-09-15

     tags: cipher, cryptography, microsoft, mozilla, network/transport-layer-security, security

     [ permalink ]

     • https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
     • https://eprint.iacr.org/2017/536
     • https://github.com/mitls/hacl-star
215. Quick HOWTO : Ch31 : Centralized Logins Using LDAP and RADIUS - Linux Home Networking 2017-09-02

     tags: linux, network/ldap, security/authentication

     [ permalink ]
216. Open Source Guide - LDAP for Rocket Scientists - Contents 2017-09-02

     tags: linux, network/ldap, security/authentication

     [ permalink ]

     • http://www.zytrax.com/books/ldap/ch15/
217. RFC 2307 | An Approach for Using LDAP as a Network Information Service 2017-08-28

     tags: network, network/ldap, security, security/authentication, user

     [ permalink ]
218. phpLDAPadmin | Templates 2017-08-28

     tags: group, network/ldap, programming/php, schema, security/authentication, tree, user

     [ permalink ]

     • https://forums.zarafa.com/showthread.php?609-Phpldapadmin-templates
219. LDAP | Web-based management interfaces, Self-service 2017-08-28

     tags: management, network/ldap, security, security/authentication, sysadmin, user, web

     [ permalink ]

     • http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
     • https://www.fusiondirectory.org/
     • https://www.ldap-account-manager.org/lamcms/
     • https://ltb-project.org/documentation/self-service-password
     • https://github.com/futurice/futurice-ldap-user-manager

     Over the wire:

     • https://en.wikipedia.org/wiki/List_of_LDAP_software
     • https://serverfault.com/questions/295580/theres-got-to-be-a-foss-web-based-ldap-password-reset-app-out-there-right
     • https://serverfault.com/questions/178637/web-interface-for-ldap-management
     • https://www.reddit.com/r/sysadmin/comments/29zf1q/fusiondirectory_openldap_management/
     • http://futurice.com/blog/user-friendly-web-ui-for-ldap
220. Ansible | Automated OpenLDAP installation on Debian 2017-08-24

     tags: configuration-management/ansible, linux, linux/debian, network/ldap, security/authentication

     [ permalink ]

     Ansible modules:

     • https://docs.ansible.com/ansible/latest/ldap_entry_module.html
     • https://docs.ansible.com/ansible/latest/ldap_attr_module.html

     Installation guides:

     • https://wiki.debian.org/LDAP/OpenLDAPSetup
     • https://debian-administration.org/article/585/OpenLDAP_installation_on_Debian

     Debconf & slapd automation:

     • https://unix.stackexchange.com/questions/362547/automating-slapd-install
     • https://www.linuxquestions.org/questions/linux-server-73/script-install-slapd-with-admin-ldap-password-4175426002/
     • https://www.digitalocean.com/community/tutorials/how-to-change-account-passwords-on-an-openldap-server