[freeipa PR#879][opened] FIPS mode and NT hashes
by sumit-bose
URL: https://github.com/freeipa/freeipa/pull/879
Author: sumit-bose
Title: #879: FIPS mode and NT hashes
Action: opened
PR body:
"""
In FIPS mode NT hashes (aka md4) are not allowed. If FIPS more is detected we
disable NT hashes in the password plugin even is they are allowed by IPA
configuration.
Since ipa-sam is running as part of smbd is it safe to use the E_md4hash()
from Samba. This way ipa-sam does not depend on other crypto libraries
which might depend on other rules like e.g. FIPS mode.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/879/head:pr879
git checkout pr879
6 years, 10 months
FreeIPA and Cockpit
by Marius Vollmer
Hi,
I am working on a FreeIPA setup tool that runs in Cockpit, the remote
server manager:
https://github.com/mvollmer/cockpit-app-freeipa
Here is a short demo of the current "minimum viable proof of concept":
https://www.youtube.com/watch?v=oJE_LKYEQcg
My main motivation for this work is to create some content for the
upcoming Cockpit Application Manager. If all goes well, I would like
this FreeIPA setup tool to be the first real Cockpit add-on. Thus, I'll
be happy with some very basic functionality that will probably not
satisfy a real FreeIPA user.
So, please help me turn this into a real tool and not just demo content!
6 years, 10 months