Questions tagged [identity-management]
The identity-management tag has no usage guidance.
53
questions
44
votes
2
answers
45k
views
How could I stop ssh offering a wrong key?
(This is a problem with ssh, not gitolite)
I've configured gitolite on my home server (ubuntu 12.04 server, open-ssh). I want an special identityfile to administer the repositories, so I need to ...
7
votes
4
answers
2k
views
Giant active directory deployment vs giant Sun LDAP
At work we're in the early phases of an identity management project. This is all in the context of higher ed where we have a couple thousand faculty / staff and about twenty thousand students.
Has ...
7
votes
4
answers
4k
views
What tools exist for identity management w/ Active Directory? [closed]
What products do you use to manage identity propagation in your environment?
For example, Joe gets hired at the company. HR inputs Joe's profile in the HR employee management application. A ticket ...
7
votes
0
answers
189
views
Sunsetting Microsoft Identity Management for Unix the right way
I'd like to make sure that we don't have any connections to our AD controllers before sunsetting, but some run Microsoft Identity Management for Unix / Server for NIS. I'm having a dog of a time ...
6
votes
2
answers
3k
views
Account management tools supporting self-service registration and email verification? [closed]
I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly ...
5
votes
4
answers
700
views
Active Directory New User Workflow
I work in a small organization that uses a single file & print server with an Active Directory domain for user management.
The office admin who inducts new people is non-technical and generally ...
4
votes
5
answers
7k
views
Central Authentication For Windows, Linux, Network Devices
I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
4
votes
1
answer
4k
views
SQL Server 2008: what happened if identity oversteps a maximal value of int?
Imagine we have a table:
create table MYTABLE (
id int IDENTITY(1,1)
,name varchar(10)
)
We have to insert a lot of rows into the table.
Does anybody know what will happen when a generated ...
4
votes
2
answers
287
views
Can I set up application specific passwords on Ubuntu?
I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
3
votes
3
answers
9k
views
How to fix "Could not open a connection to your authentication agent." error when trying to add ssh-key?
I'm using Ubuntu server 10.04.
ssh-add /foo/cert.pem gave the following output:
Could not open a connection to your
authentication agent.
These are my running processes:
ps -aux | grep ssh
...
3
votes
4
answers
348
views
Which identity management products are suitable for small to medium business?
Let's scope out an average setup:
Web company
About 50 users
A few User Groups (Management, Support, Developers, Sys-Admins, Testers, Sales)
A bunch of permissions (Only management is allowed to ...
3
votes
1
answer
2k
views
Active Directory memberOf LDAP syntax
I want to add a user (from Sun IDM to Active Directory) to more than one group.
The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
3
votes
1
answer
850
views
How to Solve unknown_ca error on WSO2IS-5.7 when using MySQL RDS as backstore?
I've tried to install an instance on AWS using aws RDS as
my datasource through the mysql-connector-java-5.1.45-bin.jar
with jdbc url
jdbc:mysql://< instance>.< zone>.rds.amazonaws.com:...
2
votes
3
answers
2k
views
There is anything to consider in change IIS Pool Identity to Network Service instead ApplicationPoolIdentity?
I'm facing a problem with IIS Pool Identity. I need to give right permissions to it user, but i cannot find the user that is setted to the IIS Pool Identity, that is ApplicationPoolIdentity. I find ...
2
votes
4
answers
3k
views
Relative strengths and weaknesses of various Identity Management solutions you have used
This is somewhat more of a survey question, than a specific question. (I assume that is still ok).
I work as a consultant doing Identity Management projects. We focus mostly on Novell's Identity ...
2
votes
1
answer
1k
views
Get the actual username of a SSH Client that established a SSH session to a remote server
Let's say we have a user account called john on a CentOS server (192.168.1.1) and on the other side we have a user who owns this account and from time to time uses his account from different locations ...
2
votes
1
answer
871
views
Where does Chrome fetch my identity from after having deleted cookies?
I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication)
What I have tried :
Delete all cookies, ...
2
votes
1
answer
4k
views
Grant users ssh access to instance in google compute project using IAM
We have a number of linux VMs (google compute engines) in our projects on google cloud. I want to allow the users (developers) access to the google compute engines using SSH only. No ability to change ...
2
votes
1
answer
467
views
Unix services on Windows Server 2008
Looking to remove a domain controller that is currently the NIS master for our identity management for unix service. Need to know how to migrate the master to a different Windows server.
When you ...
2
votes
1
answer
53
views
Recommendations for future-facing (fully cloud-based) Identity and EMM/UEM Solutions
I have recently started consulting for a tech startup of about 60 users that has grown, and is looking to expand, quickly.
Due to the fast growth, and lack of formal IT advice up until now, they are ...
2
votes
2
answers
487
views
Cannot create a user in IPA server for remote login
I had created a new IPA IdM server in Centos 7 using script install-ipa-server. The installation was successful. After installation, I was not able to create a user using IPA user-add user, it asks ...
1
vote
2
answers
2k
views
FIM 2010 GAL MA - It appears this forest is not exchange enabled
I am trying to configure a Management Agent (MA) for Global Address List (GAL) sync in FIM 2010. I cannot move to the next step from "Configure GAL" because of an error message saying "It appears this ...
1
vote
1
answer
1k
views
Trouble with Identity Range Sizes
I am trying to setup our replication with a republisher. We, unfortunately, have some tables with an int PK IDENTITY and I am getting the following error when trying to create the publication.
SQL ...
1
vote
1
answer
63
views
Is there a role for overall management for Google Cloud Platform?
I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know).
I checked the documentation of GCP and from ...
1
vote
1
answer
89
views
Novell Identity Manager (NIM) 3.6: How to make an image part of the resources for HTML reports?
This question might not belong here, and since this is related to an identity management product, I thought I could ask nonetheless.
I'm currently working to list all of the user identities in ...
1
vote
0
answers
41
views
Why don't identity providers have separate IDs and Names in Openstack?
I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
1
vote
0
answers
184
views
How can I pass login_hint/authuser to Google IdP when using AWS SSO
I have configured AWS SSO to use Google as an IdP. It's working fine.
However, since I have multiple google accounts I often have to go through the multiple login 'chooser'.
When accessing Google ...
1
vote
1
answer
445
views
Linux equivalent of Unix who -m command, to show original user ID before su?
I'm trying to find a Linux equivalent of running who -m in Unix. In Unix, who -m gives the first user ID you used to log in, before starting any new shell sessions through su, etc.
The -m switch to ...
1
vote
0
answers
100
views
Oracle Identity Manager and Microsoft Read-Only Domain Controllers
Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC)
My setup has OID importing users from AD RODC. Is this configuration supported?...
1
vote
1
answer
624
views
Active Directory 2008 R2 Identity Management for Unix Default Attriubutes
Forgive me if this has already been answered elsewhere but I'm yest to find a definitive answer.
I'm using AD 2008 R2 and have Identity Management for Unix installed adding the Unix Attributes tab to ...
1
vote
1
answer
527
views
Forefront Identity Manager 2010 copy/update an OU from one domain to another
Basically the idea is to copy and update 1 OU in the master Domain into slave Domain. The OU will have users and groups in it. If a new user is created in the master domain they will be created in the ...
0
votes
2
answers
181
views
How to deploy Azure AD, join computers to domain?
I've no experience deploying domain services from Azure/Intune, just plenty of experience with an on-prem domain controller.
I have a client here who has an azure tenant, O365 and a domain setup. I'm ...
0
votes
1
answer
9k
views
Azure AD Connect Import
I'm running into an issue with the latest version, 4.1.1.180, that I can't resolve.
After installation, the AD Connector is now failing and throwing errors. They fail on the import and export run ...
0
votes
2
answers
5k
views
What are industry standards and professional best practices in network hosts naming? [duplicate]
Possible Duplicate:
Naming convention for computers
It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host diverse ...
0
votes
1
answer
3k
views
How do you change an Office 365 identity to an external identity?
How do I change (downgrade or convert) an existing Office 365 user to a guest user with an external identity?
I can change a user's User Type from 'Member' to 'Guest' in the Azure Active Directory ...
0
votes
1
answer
77
views
Link user accounts (hierarchy) with Google Identity Platform
I'm planning on having family accounts and I was wondering if Google Identity Platform allows some sort of hierarchical chain across users.
Example: my family consists of three people, but I'm the one ...
0
votes
1
answer
234
views
Azure Active Directory & Active Directory B2C conflicts
We use Active Directory B2C to allow our client users to login to our web app.
Recently we've had users at 2 different client orgs who have been unable to login. They were able to demonstrate the ...
0
votes
2
answers
123
views
Possible options for knowing user's identity without using a user account
I am managing a network in a condominium. Right now, I am looking for a method for logging the users' activities without using a user login system. We have this login system not long ago, but people ...
0
votes
1
answer
300
views
Migrating Identity Providers - specifying a new users password hash
We'd like to switch Identity Provider (and Web Access Manager), and also the user directory we use, but would like to do so without users needing to change their password.
We currently have the SSHA ...
0
votes
2
answers
445
views
Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?
It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
0
votes
1
answer
66
views
Allow AWS Identity provider to access a private VPC where the OIDC Idp resides
We want to implement Gitlab-AWS short-lived credentials but our Gitlab instance is located inside a private, non internet accessible VPC Subnet.
I have looked into VPC Endpoints but I cannot find the ...
0
votes
0
answers
322
views
GCP - Internat Aware Proxy (IAP) using only "SSH & TCP Resources" (NOT HTTPS resources)
AIM: Enable a few internal websites (hosted on our GCP VMs) to be accessible to the internet w/o VPN. This access must be able to be manually added on a user-by-user or group basis, using Azure as an ...
0
votes
1
answer
2k
views
Active Directory + NFS: Why is domain user's uidNumber, gidNumber not shown by `id` command in Windows?
I am connecting NFS v3 shares (ZFS datasets) from a Solaris file server owned by domain users to Windows computers, but the concept should apply to basically any POSIX-style server. I'm hoping to ...
0
votes
1
answer
4k
views
How to import ldif users into FreeIPA?
Maybe it needs two steps:
Add users defined in the ldif file to OpenLDAP(Inside FreeIPA)
Migrate those added users from OpenLDAP to IPA
Current situation
Setup FreeIPA server, initilized an admin ...
0
votes
0
answers
91
views
Apache Syncope Depends on Maven? What is maven for in this context?
fwiw: I did not come into this looking for another CI/CD tool. I came
into this looking for an IAM tool (and I found Syncope). When Syncope
install documentation called for Maven that's when the ...
0
votes
0
answers
152
views
Identity providers for SSO and untrusted sites
I am implementing SSO between a custom PHP app and an in house tableau server using SAML. I chose auth0 as my identity provider. I got it working with a test version of the app running in a Vagrant VM....
0
votes
1
answer
86
views
AD LDS data refreshing from script
I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account.
I cannot enable syncrepl ont ...
0
votes
0
answers
137
views
FIM Wrong accountType error
I have an Active directory containing an universal security group named GG_H_W4M2MD it has several members. I have a "normal" user account named 26626.
Both are managed using FIM 2010 R2 (Forefront ...
0
votes
1
answer
868
views
RHEL 7/CENT0S 7 IPA/IDM transitive trusts
I have a situation I am having a hard time getting a clean answer on.
I have a IDM/IPA domain setup and I have a trust setup with my Windows domain. That part is working perfectly.
I have a one ...
0
votes
1
answer
501
views
Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting
My environment requires me to be able to create Exchange mailboxes on
existing users, disable those mailboxes and then, some time later,
re-enable them and have Exchange reconnect them automatically ...