29
Local Networks Go Global When Domain Names Collide
(krebsonsecurity.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 24 Aug 2024
29 points (100.0% liked)
Cybersecurity
5408 readers
85 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
founded 1 year ago
MODERATORS
Unrelated but this pissed me off.
The only Microsoft innovation there was Embracing, Extending, and Extinguishing LDAP and Kerberos.
I will NEVER forgive boomer admins for allowing that. I don't mean to be presumptive, maybe its just where I work, but old guard windows admins seem to be fucking lazy dipshits as a rule.
I've never met sysadmins/engies who give so little a shit about what they're setting up and why. If you only care that it works, and not how, why the fuck are you in this industry? Go get an MBA like the unskilled, uncaring sap you are and fuck off from my special interest.
Man that got derailed quickly lol, though I guess it explains why they're all using domains they don't own...
Yeah I will make sure to use OpenLDAP/FreeIPA at home. I'd rather play along with RedHat's bullshit than Microsoft's bullshit
That's what I've been doing for a good bit now.
I used to do a split environment on ad but I didn't feel I was really getting anything out of windows, other than ease of use with TrueNAS.
Still haven't gotten TrueNAS working with FreeIPA, but running a NAS off of rocky isn't too bad either if you don't mind the extra setup.
The nice thing about downstream distros is you don't actually have to deal with redhats shit to use their stuff.
I dropped truenas, ran fedora server + zfs dkms module. It's been perfectly fine for a couple of years (even accounting for that nasty silent data corruption bug..)
And domain permissions work properly now. People have been asking Ix for proper support for IPA for over a decade, they aren't interested in solving it.
Which is why I'm no longer interested in supporting them lol.
You don't get to run a commercial entity under the guise of open source software, and giving back to the community, while prioritizing inter-compatibility with the king of EEE over the most popular FLOSS alternative.
Rocky has been good to me, but I still miss centos.
Honestly the only thing I've had trouble getting working with freeIPA with no alternative is some sort of centralized ROM management. Then again they all kinda lack any sync features with retroarch which is what would really bring me to them anywho.