Active Directory

Intro I run a Windows Server 2022 VM in my homelab as my primary Active Directory Domain Controller. It handles LDAP identity for Authelia, Windows, and even Linux (through FreeIPA). Because my entire homelab’s authentication has no redundancy, I wanted to set up an offsite replica (technically an …

Intro At the time of writing this post, I found no guide on setting up Authelia as a social provider for ERPNext. These are the steps I took to link them. Authelia If you have an LDAP server configured, you have to make sure the correct attributes are retrieved. The attributes section should look …

Intro I was tired of entering my password every time I SSH’d to my VMs, but setting up SSH keys would mean manually copying my public key to each host I wanted to connect to. I then read about one key feature of FreeIPA, which is serving as a centralized key repository. This posed another …

Intro After setting up the AD trust, every time I logged in the shell defaulted to /bin/sh. To change it to /bin/bash or any other shell of your choice you can do the following. Editing SSSD.conf Navigate to /etc/sssd/ and open sssd.conf in an elevated text editor. It should look something like …

Intro After creating my domain trust between AD and FreeIPA, I was left wanting to access restricted resources in Linux using my AD accounts. To circumvent this, I mapped a group from AD to FreeIPA and gave it the appropriate permissions. Create the group in AD The first step would be to create a …

Intro After creating a trust in FreeIPA, I kept having to write the full domain alongside my username whenever I tried to access the system. These are the steps I took to log in only with my username. Editing SSSD.conf Navigate to /etc/sssd/ and open sssd.conf in an elevated text editor. It should …