VirtualTam's bookmarks

21. dex: OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors 2019-06-11

    tags: network/ldap, programming/go, security/authentication, security/authorization, security/openid, security/token

    [ permalink ]
22. MIG: Mozilla InvestiGator 2019-05-27

    tags: filesystem, mozilla, network, security, sysadmin

    [ permalink ]

    • https://github.com/mozilla/mig
    • https://j.vehent.org/blog/index.php?post/2015/07/26/Using-Mozilla-Investigator-%28MIG%29-to-detect-unknown-hosts
    • https://j.vehent.org/blog/index.php?post/2015/09/13/Investigating-authorized-keys-across-the-infrastructure-using-MIG
23. hydra: OpenID Connect certified OAuth2 Server - cloud native, security-first, open source API security for your infrastructure. Written in Go. SDKs for any language. 2019-03-13

    tags: programming/go, security, security/authentication, security/authorization, security/oauth, security/openid

    [ permalink ]
24. authboss: The boss of http auth. A modular authentication system for the web. 2019-03-13

    tags: programming/api, programming/go, security/authentication, security/authorization, security/token

    [ permalink ]
25. FusionAuth - Identity management - Authentication, authorization, user management, reporting, analytics 2019-03-13

    tags: programming/api, security/authentication, security/authorization, security/password, security/token, web

    [ permalink ]
26. NetAuth: an easy to deploy, easy to use authentication and identity provider 2019-01-16

    tags: kerberos, network, network/ldap, security, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/NetAuth/NetAuth
27. amazon s3 - What is the purpose of the expiration time in signed S3 urls? - Information Security Stack Exchange 2019-01-10

    tags: cloud/aws, cryptography, cryptography/hash, security, security/authorization

    [ permalink ]
28. ec2.py: Dynamic inventory does not work with assumed roles in shared config · Issue #25718 · ansible/ansible · GitHub 2018-12-26

    tags: cloud/aws, configuration-management/ansible, programming/python, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/ansible/ansible/blob/6318229bc424e5bb95b83b5ddad355a8c315d0f7/contrib/inventory/ec2.ini#L186
    • https://github.com/ansible/ansible/pull/34279#issuecomment-355136912
    • https://docs.ansible.com/ansible/latest/plugins/inventory/aws_ec2.html
29. ldapbrowse: Console LDAP browser 2018-12-13

    tags: command-line, network/ldap, security/authentication, security/authorization

    [ permalink ]
30. Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud – Google AI 2018-11-12

    tags: cookie, network/http, research, security, web

    [ permalink ]

    • https://theory.stanford.edu/~ataly/Papers/macaroons.pdf
    • https://github.com/rescrv/libmacaroons
    • https://github.com/go-macaroon/macaroon
    • http://macaroons.io/
31. Keycloak - Open Source Identity and Access Management 2018-07-23

    tags: red-hat, security, security/authentication, security/authorization, single-sign-on, user

    [ permalink ]

    • https://github.com/keycloak
    • https://github.com/keycloak/keycloak
    • https://developers.redhat.com/blog/2018/03/19/sso-made-easy-keycloak-rhsso/
    • https://github.com/keycloak/keycloak-quickstarts
    • https://github.com/ibuetler/docker-keycloak-traefik-workshop
32. How to Setup FileBeat with Basic Auth for LogStash Output? - Filebeat - Discuss the Elastic Stack 2018-01-12

    tags: cryptography/certificate, cryptography/certificate-authority, network/transport-layer-security, observability/elastic, observability/elastic/beats, observability/elastic/logstash, security, security/authentication

    [ permalink ]

    • https://github.com/logstash-plugins/logstash-input-beats/issues/8
    • https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html
    • https://www.elastic.co/guide/en/beats/filebeat/master/config-filebeat-logstash.html
    • https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html
    • https://www.gilesorr.com/blog/elkbeats-beats-secure.html
    • https://discuss.elastic.co/t/beats-logstash-security-use-of-security-token-to-authenticate-clients/104981/4
    • https://stackoverflow.com/questions/40341664/how-to-configure-logstash-and-filebeat-ssl-communication
33. Portus - Authorization service and user interface for the next generation Docker Registry 2017-11-06

    tags: image, linux/container, linux/container/docker, programming/ruby, repository, security/authentication, web

    [ permalink ]

    • https://github.com/SUSE/Portus
34. Playing HTTP Tricks with Nginx | Elastic 2017-10-09

    tags: network/http, network/http-server/nginx, observability/elastic, observability/elastic/elasticsearch, observability/elastic/kibana, security, security/authentication

    [ permalink ]

    The X-Pack plugin comes with a subscription plan and a 30-day trial license:

    • https://www.elastic.co/subscriptions
    • https://www.elastic.co/guide/en/x-pack/current/license-expiration.html
    • https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/7

    Once the license has expired, a number of features become unavailable, among which is user management (authentication, authorization).

35. OpenVPN/easy-rsa: easy-rsa - Simple shell based CA utility 2017-03-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, network/transport-layer-security, sysadmin

    [ permalink ]

    https://wiki.archlinux.org/index.php/Easy-RSA

36. OpenSSL Command-Line HOWTO 2016-10-18

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
37. How To Create an SSH CA to Validate Hosts and Clients with Ubuntu | DigitalOcean 2016-05-26

    tags: client, cryptography/certificate, cryptography/certificate-authority, network/ssh, security/authentication, server, sysadmin

    [ permalink ]
38. Let's Encrypt | Open Certificate Authority 2014-11-19

    tags: cryptography/certificate, cryptography/certificate-authority, internet/browser, network/http, network/transport-layer-security, web

    [ permalink ]

    Arriving Summer 2015... and provided by the ISRG (Internet Security Research Group: Mozilla, Cisco, EFF...)

39. How do I create my own Certificate Authority (CA) 2014-06-09

    tags: cryptography/certificate, cryptography/certificate-authority, network/transport-layer-security, privacy, security, web

    [ permalink ]