Questions tagged [identity-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
44 votes
2 answers
45k views

How could I stop ssh offering a wrong key?

(This is a problem with ssh, not gitolite) I've configured gitolite on my home server (ubuntu 12.04 server, open-ssh). I want an special identityfile to administer the repositories, so I need to ...
Alvaro Maceda's user avatar
7 votes
4 answers
2k views

Giant active directory deployment vs giant Sun LDAP

At work we're in the early phases of an identity management project. This is all in the context of higher ed where we have a couple thousand faculty / staff and about twenty thousand students. Has ...
chris's user avatar
  • 12k
7 votes
4 answers
4k views

What tools exist for identity management w/ Active Directory? [closed]

What products do you use to manage identity propagation in your environment? For example, Joe gets hired at the company. HR inputs Joe's profile in the HR employee management application. A ticket ...
spoulson's user avatar
  • 2,183
7 votes
0 answers
189 views

Sunsetting Microsoft Identity Management for Unix the right way

I'd like to make sure that we don't have any connections to our AD controllers before sunsetting, but some run Microsoft Identity Management for Unix / Server for NIS. I'm having a dog of a time ...
user228832's user avatar
6 votes
2 answers
3k views

Account management tools supporting self-service registration and email verification? [closed]

I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly ...
larsks's user avatar
  • 44.7k
5 votes
4 answers
700 views

Active Directory New User Workflow

I work in a small organization that uses a single file & print server with an Active Directory domain for user management. The office admin who inducts new people is non-technical and generally ...
Tim Long's user avatar
  • 1,738
4 votes
5 answers
7k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
Mojah's user avatar
  • 886
4 votes
1 answer
4k views

SQL Server 2008: what happened if identity oversteps a maximal value of int?

Imagine we have a table: create table MYTABLE ( id int IDENTITY(1,1) ,name varchar(10) ) We have to insert a lot of rows into the table. Does anybody know what will happen when a generated ...
Timofey's user avatar
  • 145
4 votes
2 answers
287 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
jldugger's user avatar
  • 14.5k
3 votes
3 answers
9k views

How to fix "Could not open a connection to your authentication agent." error when trying to add ssh-key?

I'm using Ubuntu server 10.04. ssh-add /foo/cert.pem gave the following output: Could not open a connection to your authentication agent. These are my running processes: ps -aux | grep ssh ...
theTuxRacer's user avatar
3 votes
4 answers
348 views

Which identity management products are suitable for small to medium business?

Let's scope out an average setup: Web company About 50 users A few User Groups (Management, Support, Developers, Sys-Admins, Testers, Sales) A bunch of permissions (Only management is allowed to ...
Michael Renner's user avatar
3 votes
1 answer
2k views

Active Directory memberOf LDAP syntax

I want to add a user (from Sun IDM to Active Directory) to more than one group. The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
Possa's user avatar
  • 185
3 votes
1 answer
850 views

How to Solve unknown_ca error on WSO2IS-5.7 when using MySQL RDS as backstore?

I've tried to install an instance on AWS using aws RDS as my datasource through the mysql-connector-java-5.1.45-bin.jar with jdbc url jdbc:mysql://< instance>.< zone>.rds.amazonaws.com:...
Gennady A.'s user avatar
2 votes
3 answers
2k views

There is anything to consider in change IIS Pool Identity to Network Service instead ApplicationPoolIdentity?

I'm facing a problem with IIS Pool Identity. I need to give right permissions to it user, but i cannot find the user that is setted to the IIS Pool Identity, that is ApplicationPoolIdentity. I find ...
Vinicius Ottoni's user avatar
2 votes
4 answers
3k views

Relative strengths and weaknesses of various Identity Management solutions you have used

This is somewhat more of a survey question, than a specific question. (I assume that is still ok). I work as a consultant doing Identity Management projects. We focus mostly on Novell's Identity ...
geoffc's user avatar
  • 2,185
2 votes
1 answer
1k views

Get the actual username of a SSH Client that established a SSH session to a remote server

Let's say we have a user account called john on a CentOS server (192.168.1.1) and on the other side we have a user who owns this account and from time to time uses his account from different locations ...
Mohammad Yekrangian's user avatar
2 votes
1 answer
871 views

Where does Chrome fetch my identity from after having deleted cookies?

I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication) What I have tried : Delete all cookies, ...
MeMow's user avatar
  • 292
2 votes
1 answer
4k views

Grant users ssh access to instance in google compute project using IAM

We have a number of linux VMs (google compute engines) in our projects on google cloud. I want to allow the users (developers) access to the google compute engines using SSH only. No ability to change ...
GerM's user avatar
  • 31
2 votes
1 answer
467 views

Unix services on Windows Server 2008

Looking to remove a domain controller that is currently the NIS master for our identity management for unix service. Need to know how to migrate the master to a different Windows server. When you ...
tcnolan's user avatar
  • 432
2 votes
1 answer
53 views

Recommendations for future-facing (fully cloud-based) Identity and EMM/UEM Solutions

I have recently started consulting for a tech startup of about 60 users that has grown, and is looking to expand, quickly. Due to the fast growth, and lack of formal IT advice up until now, they are ...
Campbell's user avatar
2 votes
2 answers
487 views

Cannot create a user in IPA server for remote login

I had created a new IPA IdM server in Centos 7 using script install-ipa-server. The installation was successful. After installation, I was not able to create a user using IPA user-add user, it asks ...
NINJA's user avatar
  • 21
1 vote
2 answers
2k views

FIM 2010 GAL MA - It appears this forest is not exchange enabled

I am trying to configure a Management Agent (MA) for Global Address List (GAL) sync in FIM 2010. I cannot move to the next step from "Configure GAL" because of an error message saying "It appears this ...
WooYek's user avatar
  • 304
1 vote
1 answer
1k views

Trouble with Identity Range Sizes

I am trying to setup our replication with a republisher. We, unfortunately, have some tables with an int PK IDENTITY and I am getting the following error when trying to create the publication. SQL ...
Refracted Paladin's user avatar
1 vote
1 answer
63 views

Is there a role for overall management for Google Cloud Platform?

I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know). I checked the documentation of GCP and from ...
Luke Vo's user avatar
  • 159
1 vote
1 answer
89 views

Novell Identity Manager (NIM) 3.6: How to make an image part of the resources for HTML reports?

This question might not belong here, and since this is related to an identity management product, I thought I could ask nonetheless. I'm currently working to list all of the user identities in ...
Will Marcouiller's user avatar
1 vote
0 answers
41 views

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
Zoli's user avatar
  • 11
1 vote
0 answers
184 views

How can I pass login_hint/authuser to Google IdP when using AWS SSO

I have configured AWS SSO to use Google as an IdP. It's working fine. However, since I have multiple google accounts I often have to go through the multiple login 'chooser'. When accessing Google ...
sw1nn's user avatar
  • 171
1 vote
1 answer
445 views

Linux equivalent of Unix who -m command, to show original user ID before su?

I'm trying to find a Linux equivalent of running who -m in Unix. In Unix, who -m gives the first user ID you used to log in, before starting any new shell sessions through su, etc. The -m switch to ...
narwahl's user avatar
  • 33
1 vote
0 answers
100 views

Oracle Identity Manager and Microsoft Read-Only Domain Controllers

Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC) My setup has OID importing users from AD RODC. Is this configuration supported?...
Fabio's user avatar
  • 155
1 vote
1 answer
624 views

Active Directory 2008 R2 Identity Management for Unix Default Attriubutes

Forgive me if this has already been answered elsewhere but I'm yest to find a definitive answer. I'm using AD 2008 R2 and have Identity Management for Unix installed adding the Unix Attributes tab to ...
malco's user avatar
  • 465
1 vote
1 answer
527 views

Forefront Identity Manager 2010 copy/update an OU from one domain to another

Basically the idea is to copy and update 1 OU in the master Domain into slave Domain. The OU will have users and groups in it. If a new user is created in the master domain they will be created in the ...
user avatar
0 votes
2 answers
181 views

How to deploy Azure AD, join computers to domain?

I've no experience deploying domain services from Azure/Intune, just plenty of experience with an on-prem domain controller. I have a client here who has an azure tenant, O365 and a domain setup. I'm ...
boog's user avatar
  • 240
0 votes
1 answer
9k views

Azure AD Connect Import

I'm running into an issue with the latest version, 4.1.1.180, that I can't resolve. After installation, the AD Connector is now failing and throwing errors. They fail on the import and export run ...
Jesus Shelby's user avatar
  • 1,304
0 votes
2 answers
5k views

What are industry standards and professional best practices in network hosts naming? [duplicate]

Possible Duplicate: Naming convention for computers It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host diverse ...
Ivan's user avatar
  • 3,398
0 votes
1 answer
3k views

How do you change an Office 365 identity to an external identity?

How do I change (downgrade or convert) an existing Office 365 user to a guest user with an external identity? I can change a user's User Type from 'Member' to 'Guest' in the Azure Active Directory ...
Michhes's user avatar
  • 51
0 votes
1 answer
77 views

Link user accounts (hierarchy) with Google Identity Platform

I'm planning on having family accounts and I was wondering if Google Identity Platform allows some sort of hierarchical chain across users. Example: my family consists of three people, but I'm the one ...
renno's user avatar
  • 111
0 votes
1 answer
234 views

Azure Active Directory & Active Directory B2C conflicts

We use Active Directory B2C to allow our client users to login to our web app. Recently we've had users at 2 different client orgs who have been unable to login. They were able to demonstrate the ...
Eoin Campbell's user avatar
0 votes
2 answers
123 views

Possible options for knowing user's identity without using a user account

I am managing a network in a condominium. Right now, I am looking for a method for logging the users' activities without using a user login system. We have this login system not long ago, but people ...
Karl's user avatar
  • 123
0 votes
1 answer
300 views

Migrating Identity Providers - specifying a new users password hash

We'd like to switch Identity Provider (and Web Access Manager), and also the user directory we use, but would like to do so without users needing to change their password. We currently have the SSHA ...
Stephen Denne's user avatar
0 votes
2 answers
445 views

Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?

It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
Corey's user avatar
  • 2,081
0 votes
1 answer
66 views

Allow AWS Identity provider to access a private VPC where the OIDC Idp resides

We want to implement Gitlab-AWS short-lived credentials but our Gitlab instance is located inside a private, non internet accessible VPC Subnet. I have looked into VPC Endpoints but I cannot find the ...
Michael Angel P.'s user avatar
0 votes
0 answers
322 views

GCP - Internat Aware Proxy (IAP) using only "SSH & TCP Resources" (NOT HTTPS resources)

AIM: Enable a few internal websites (hosted on our GCP VMs) to be accessible to the internet w/o VPN. This access must be able to be manually added on a user-by-user or group basis, using Azure as an ...
Egyas's user avatar
  • 165
0 votes
1 answer
2k views

Active Directory + NFS: Why is domain user's uidNumber, gidNumber not shown by `id` command in Windows?

I am connecting NFS v3 shares (ZFS datasets) from a Solaris file server owned by domain users to Windows computers, but the concept should apply to basically any POSIX-style server. I'm hoping to ...
Avery Freeman's user avatar
0 votes
1 answer
4k views

How to import ldif users into FreeIPA?

Maybe it needs two steps: Add users defined in the ldif file to OpenLDAP(Inside FreeIPA) Migrate those added users from OpenLDAP to IPA Current situation Setup FreeIPA server, initilized an admin ...
rawmain's user avatar
  • 311
0 votes
0 answers
91 views

Apache Syncope Depends on Maven? What is maven for in this context?

fwiw: I did not come into this looking for another CI/CD tool. I came into this looking for an IAM tool (and I found Syncope). When Syncope install documentation called for Maven that's when the ...
Jake's user avatar
  • 1
0 votes
0 answers
152 views

Identity providers for SSO and untrusted sites

I am implementing SSO between a custom PHP app and an in house tableau server using SAML. I chose auth0 as my identity provider. I got it working with a test version of the app running in a Vagrant VM....
Larry Martell's user avatar
0 votes
1 answer
86 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
user avatar
0 votes
0 answers
137 views

FIM Wrong accountType error

I have an Active directory containing an universal security group named GG_H_W4M2MD it has several members. I have a "normal" user account named 26626. Both are managed using FIM 2010 R2 (Forefront ...
zu1b's user avatar
  • 121
0 votes
1 answer
868 views

RHEL 7/CENT0S 7 IPA/IDM transitive trusts

I have a situation I am having a hard time getting a clean answer on. I have a IDM/IPA domain setup and I have a trust setup with my Windows domain. That part is working perfectly. I have a one ...
sjustice's user avatar
0 votes
1 answer
501 views

Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting

My environment requires me to be able to create Exchange mailboxes on existing users, disable those mailboxes and then, some time later, re-enable them and have Exchange reconnect them automatically ...
foo's user avatar
  • 76