Hello Team,
I was wondering how I can configure FreeIPA as a bastion server when I ssh other hosts. Basically FreeIPA would be in the middle of the ssh approval to access to the specific server via ssh. Is a functionality that FreeIPA has at the moment?
Thank you for your help, gcol
Hi there, Maybe something like this: https://github.com/aker-gateway/Aker
On Wed, May 19, 2021, 17:24 G Col via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:
Hello Team,
I was wondering how I can configure FreeIPA as a bastion server when I ssh other hosts. Basically FreeIPA would be in the middle of the ssh approval to access to the specific server via ssh. Is a functionality that FreeIPA has at the moment?
Thank you for your help, gcol _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
While you're at it, you will catch further bugs (including likely named crashing) if your tests enable dnssec on several domains at the same time, then test them all. It's not enough to just turn on dnssec on one domain and test it then call it 'ok'.
HC
On 5/19/21 11:50 AM, Ernedin Zajko via FreeIPA-users wrote:
Hi there, Maybe something like this: https://github.com/aker-gateway/Aker https://github.com/aker-gateway/Aker
On Wed, May 19, 2021, 17:24 G Col via FreeIPA-users <freeipa-users@lists.fedorahosted.org mailto:freeipa-users@lists.fedorahosted.org> wrote:
Hello Team, I was wondering how I can configure FreeIPA as a bastion server when I ssh other hosts. Basically FreeIPA would be in the middle of the ssh approval to access to the specific server via ssh. Is a functionality that FreeIPA has at the moment? Thank you for your help, gcol _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ <https://docs.fedoraproject.org/en-US/project/code-of-conduct/> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines <https://fedoraproject.org/wiki/Mailing_list_guidelines> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org <https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure <https://pagure.io/fedora-infrastructure>
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Hi Ernedyn and Harry,
Does this mean that FreeIPA doesn't have this functionality?
Aker I understand is a different piece of software not related with FreeIPA? My version is 4.6.8. About those bugs mentioned, is this referring to the Aker implementation with FreeIPA?
Thank you for your help. gcol
Not sure about your previous messages. Let me know if you can help me with this. I really appreciate it.
Thank you for your help, gcol
freeipa-users@lists.fedorahosted.org