VirtualTam's bookmarks

21. GitLab Container Registry | GitLab 2019-10-21

    tags: continuous-integration, continuous-integration/continuous-delivery, linux/container/docker, registry, security/authentication, security/authorization, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    • https://docs.gitlab.com/ce/administration/packages/container_registry.html
    • https://docs.docker.com/registry/deploying/
22. RFC 2222 - Simple Authentication and Security Layer (SASL) 2019-10-21

    tags: email, linux, network/ldap, network/smtp, security, security/authentication, unix

    [ permalink ]

    • https://en.wikipedia.org/wiki/Simple_Authentication_and_Security_Layer
    • https://tools.ietf.org/html/rfc2444
    • https://tools.ietf.org/html/rfc4422
    • https://tools.ietf.org/html/rfc4752
23. Pomerium, a standardized interface to add access control whether an application itself has authorization or authentication baked-in 2019-09-16

    tags: network/http, network/proxy, programming/api, security, security/authentication, user, web

    [ permalink ]

    • https://github.com/pomerium/pomerium
24. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow 2019-09-08

    tags: configuration-management/ansible, cryptography/public-key-infrastructure, network/ssh, security, security/authentication

    [ permalink ]

    • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
    • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
    • https://github.com/ansible/ansible/issues/11347
25. AWS Tutorial: Enable Your Users to Configure Their Own Credentials and MFA Settings - Identity and Access Management 2019-08-08

    tags: cloud/aws, programming/api, security, security/authentication, security/authorization, user

    [ permalink ]

    • https://aws.amazon.com/blogs/security/how-to-delegate-management-of-multi-factor-authentication-to-aws-iam-users/
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_aws_my-sec-creds-self-manage.html
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
26. FreeIPA Installation du serveur et de son réplica | Worteks 2019-07-25

    tags: kerberos, network/ldap, samba, security/authentication, security/authorization, user

    [ permalink ]

    • https://www.worteks.com/fr/2018/03/29/freeipa-part1/
    • https://www.worteks.com/fr/2018/04/16/freeipa-partie-2-clients-hbac-sudo-mots-de-passe/
    • https://www.worteks.com/fr/2018/05/07/freeipa-partie-3-haute-disponibilite-automount/
    • https://www.worteks.com/fr/2019/05/23/freeipa-partie-4-seconds-facteurs-dauthentification/
27. How do you achieve fully centralized, unified user management with true SSO? : selfhosted 2019-07-22

    tags: network/ldap, security/authentication, security/authorization, self-hosting, single-sign-on, user

    [ permalink ]
28. Federation with Keycloak and FreeIPA - Red Hat Customer Portal 2019-07-22

    tags: network/ldap, red-hat, security/authentication, security/authorization, single-sign-on, user

    [ permalink ]
29. dex: OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors 2019-06-11

    tags: network/ldap, programming/go, security/authentication, security/authorization, security/openid, security/token

    [ permalink ]
30. Go repository structure templates 2019-03-13

    tags: database, network/http, programming/go, security/authentication, source-code-management, web

    [ permalink ]

    • https://github.com/katzien/go-structure-examples
      • https://www.youtube.com/watch?v=oL6JBUk6tj0
    • https://medium.com/@benbjohnson/standard-package-layout-7cdbc8391fc1
    • https://github.com/golang-standards/project-layout
    • https://github.com/ribice/gorsk-gin
    • https://github.com/gothinkster/golang-gin-realworld-example-app
    • https://github.com/mmcmm/go-gin-starter
    • https://www.reddit.com/r/golang/comments/3focff/ask_golang_have_you_built_a_complex_website_in/
    • https://github.com/volatiletech/authboss/wiki/Integration-with-gin-gonic
    • https://github.com/thewhitetulip/web-dev-golang-anti-textbook
31. hydra: OpenID Connect certified OAuth2 Server - cloud native, security-first, open source API security for your infrastructure. Written in Go. SDKs for any language. 2019-03-13

    tags: programming/go, security, security/authentication, security/authorization, security/oauth, security/openid

    [ permalink ]
32. authboss: The boss of http auth. A modular authentication system for the web. 2019-03-13

    tags: programming/api, programming/go, security/authentication, security/authorization, security/token

    [ permalink ]
33. FusionAuth - Identity management - Authentication, authorization, user management, reporting, analytics 2019-03-13

    tags: programming/api, security/authentication, security/authorization, security/password, security/token, web

    [ permalink ]
34. Login throttling in PHP 2019-01-18

    tags: bruteforce, ddos, programming/php, security, security/authentication, web

    [ permalink ]

    • http://www.omniceps.com/stop-brute-force-attacks-php-throttling/
    • http://miftyisbored.com/a-complete-tutorial-on-login-throttling-and-recaptha-with-laravel-5-3/
    • https://mattstauffer.com/blog/login-throttling-in-laravel-5.1/
    • http://codedevelopr.com/articles/throttle-user-login-attempts-in-php/
    • https://stackoverflow.com/questions/9153554/best-way-to-implement-ban-after-too-many-login-attempts
    • https://stackoverflow.com/questions/2090910/how-can-i-throttle-user-login-attempts-in-php
    • https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication#477585
35. NetAuth: an easy to deploy, easy to use authentication and identity provider 2019-01-16

    tags: kerberos, network, network/ldap, security, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/NetAuth/NetAuth
36. unCaptcha: A Low-Resource Defeat of reCaptcha's Audio Challenge 2019-01-03

    tags: audio, captcha, programming/html/form, security/authentication, web

    [ permalink ]

    • https://github.com/ecthros/uncaptcha2
    • https://www.usenix.org/system/files/conference/woot17/woot17-paper-bock.pdf
    • https://github.com/ecthros/uncaptcha
37. ec2.py: Dynamic inventory does not work with assumed roles in shared config · Issue #25718 · ansible/ansible · GitHub 2018-12-26

    tags: cloud/aws, configuration-management/ansible, programming/python, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/ansible/ansible/blob/6318229bc424e5bb95b83b5ddad355a8c315d0f7/contrib/inventory/ec2.ini#L186
    • https://github.com/ansible/ansible/pull/34279#issuecomment-355136912
    • https://docs.ansible.com/ansible/latest/plugins/inventory/aws_ec2.html
38. ldapbrowse: Console LDAP browser 2018-12-13

    tags: command-line, network/ldap, security/authentication, security/authorization

    [ permalink ]
39. Manage sensitive data with Docker secrets | Docker Documentation 2018-09-27

    tags: linux/container/docker, secret, security, security/authentication, security/password, security/token

    [ permalink ]

    • https://github.com/moby/moby/issues/13490
40. Jenkins Pipeline and Google Cloud Registry 2018-09-20

    tags: cloud/gcp, continuous-integration/jenkins, linux/container/docker, linux/container/kubernetes, pipeline, registry, security/authentication, security/token

    [ permalink ]

    • https://medium.com/google-cloud/how-to-push-docker-image-to-google-container-registry-gcr-through-jenkins-job-52b9d5ce9f7f
    • https://cloud.google.com/solutions/using-jenkins-for-distributed-builds-on-compute-engine
    • https://codeascraft.com/2018/06/05/deploying-to-google-kubernetes-engine/