VirtualTam's bookmarks

221. Generate Mozilla Security Recommended Web Server Configuration Files

     2017-10-09
     apache cipher network/http network/http-server/nginx network/transport-layer-security security server

     Permalink
     • https://github.com/mozilla/server-side-tls
     • https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
     • https://security.stackexchange.com/questions/51680/optimal-web-server-ssl-cipher-suite-configuration
     • https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
222. Free Open Source Password Manager | bitwarden

     2017-10-02
     security/password web

     Permalink
223. StackExchange/blackbox: Safely store secrets in Git/Mercurial/Subversion

     2017-10-02
     cryptography/encryption cryptography/pgp gpg privacy security/password

     Permalink
224. PHP | gzinflate and empty files

     2017-09-23
     archive compression/tar programming/php

     Permalink
     • https://secure.php.net/manual/en/function.gzinflate.php
     • https://bugs.php.net/bug.php?id=71395
     • https://stackoverflow.com/questions/27692527/why-phps-gzuncompress-function-can-go-wrong
225. Red Hat Directory Server - Chapter 14. Managing Replication

     2017-09-20
     389-ds linux linux/centos linux/red-hat network/ldap network/transport-layer-security replication security/authentication

     Permalink
     • http://directory.fedoraproject.org/docs/389ds/howto/howto-replicationmonitoring.html
     • http://directory.fedoraproject.org/docs/389ds/howto/howto-walkthroughmultimasterssl.html
     • http://www.port389.org/docs/389ds/FAQ/faq.html#how-does-the-389-multi-master-replication-work
226. How To Set Up Centralized Linux Authentication with FreeIPA on CentOS 7 | DigitalOcean

     2017-09-20
     389-ds cryptography/certificate linux linux/centos linux/red-hat network/dns network/ldap security/authentication single-sign-on

     Permalink
     • https://www.freeipa.org/page/HowTos
227. LDAP - OpenLDAP or 389 DS? : linuxadmin

     2017-09-20
     389-ds kerberos linux linux/centos network/ldap security/authentication single-sign-on

     Permalink
228. Project Everest

     2017-09-15
     cipher cryptography microsoft mozilla network/transport-layer-security security

     Permalink
     • https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
     • https://eprint.iacr.org/2017/536
     • https://github.com/mitls/hacl-star
229. Quick HOWTO : Ch31 : Centralized Logins Using LDAP and RADIUS - Linux Home Networking

     2017-09-02
     linux network/ldap security/authentication

     Permalink
230. Open Source Guide - LDAP for Rocket Scientists - Contents

     2017-09-02
     linux network/ldap security/authentication

     Permalink
     • http://www.zytrax.com/books/ldap/ch15/
231. RFC 2307 | An Approach for Using LDAP as a Network Information Service

     2017-08-28
     network network/ldap security security/authentication user

     Permalink
232. phpLDAPadmin | Templates

     2017-08-28
     group network/ldap programming/php schema security/authentication tree user

     Permalink
     • https://forums.zarafa.com/showthread.php?609-Phpldapadmin-templates
233. LDAP | Web-based management interfaces, Self-service

     2017-08-28
     management network/ldap security security/authentication sysadmin user web

     Permalink
     • http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
     • https://www.fusiondirectory.org/
     • https://www.ldap-account-manager.org/lamcms/
     • https://ltb-project.org/documentation/self-service-password
     • https://github.com/futurice/futurice-ldap-user-manager

     Over the wire:

     • https://en.wikipedia.org/wiki/List_of_LDAP_software
     • https://serverfault.com/questions/295580/theres-got-to-be-a-foss-web-based-ldap-password-reset-app-out-there-right
     • https://serverfault.com/questions/178637/web-interface-for-ldap-management
     • https://www.reddit.com/r/sysadmin/comments/29zf1q/fusiondirectory_openldap_management/
     • http://futurice.com/blog/user-friendly-web-ui-for-ldap
234. Ansible | Automated OpenLDAP installation on Debian

     2017-08-24
     configuration-management/ansible linux linux/debian network/ldap security/authentication

     Permalink

     Ansible modules:

     • https://docs.ansible.com/ansible/latest/ldap_entry_module.html
     • https://docs.ansible.com/ansible/latest/ldap_attr_module.html

     Installation guides:

     • https://wiki.debian.org/LDAP/OpenLDAPSetup
     • https://debian-administration.org/article/585/OpenLDAP_installation_on_Debian

     Debconf & slapd automation:

     • https://unix.stackexchange.com/questions/362547/automating-slapd-install
     • https://www.linuxquestions.org/questions/linux-server-73/script-install-slapd-with-admin-ldap-password-4175426002/
     • https://www.digitalocean.com/community/tutorials/how-to-change-account-passwords-on-an-openldap-server
235. Selfhosted Alternative to Mxtoolbox.com? : selfhosted

     2017-08-24
     email linux network network/dns security sysadmin

     Permalink
     • https://github.com/heximcz/mxtoolbox
     • https://github.com/p410n3/scananyweb.site
236. Netflix/stethoscope: Personalized, user-focused recommendations for employee information security.

     2017-08-22
     device framework/flask framework/react hardware programming/javascript programming/python security

     Permalink
     • http://techblog.netflix.com/2017/02/introducing-netflix-stethoscope.html
     • https://stethoscope.readthedocs.org/
237. Apache Tomcat 8 Configuration Reference (8.0.45) - The AJP Connector

     2017-08-16
     apache network/http network/http-server/apache-httpd network/proxy network/transport-layer-security programming/java tomcat web

     Permalink
     • https://stackoverflow.com/questions/23931987/apache-proxy-no-protocol-handler-was-valid
     • https://serverfault.com/questions/746810/enforcing-client-verification-in-apache-just-for-a-specific-client-certificate
     • https://httpd.apache.org/docs/2.4/mod/mod_ssl.html
     • https://serverfault.com/questions/639317/ah01896-unable-to-determine-list-of-acceptable-ca-certificates-for-client-authe#842857
     • http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start
     • https://wiki.apache.org/tomcat/FAQ/Connectors
     • https://serverfault.com/questions/785652/how-do-i-configure-apache-to-proxy-tomcat-using-ajp
238. Sshguard

     2017-08-08
     ban linux network/ssh observability/logging security system

     Permalink
239. My $169 development Chromebook

     2017-07-28
     cheap internet/browser/chrome laptop linux operating-system privacy security

     Permalink
240. Alpine Linux Part 1 of 2 | Discovery to Code Execution

     2017-07-18
     exploit linux linux/alpine memory pentest security

     Permalink
     • https://www.twistlock.com/2017/07/13/alpine-linux-pt-2-twistlock-security-alert/
     • https://www.reddit.com/r/linux/comments/6ntkvb/alpine_linux_exploitation/