Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [identity-management]

The tag has no usage guidance.

1
vote
1answer
37 views

How to Solve unknown_ca error on WSO2IS-5.7 when using MySQL RDS as backstore?

I've tried to install an instance on AWS using aws RDS as my datasource through the mysql-connector-java-5.1.45-bin.jar with jdbc url jdbc:mysql://< instance>.< zone>.rds.amazonaws.com:...
2
votes
0answers
27 views

Recommendations for future-facing (fully cloud-based) Identity and EMM/UEM Solutions

I have recently started consulting for a tech startup of about 60 users that has grown, and is looking to expand, quickly. Due to the fast growth, and lack of formal IT advice up until now, they are ...
0
votes
0answers
64 views

Ping Federate 8.2.2 .well-known/openid-configuration “jwks_uri” is missing keyset

I am creating a resource server that is using using ping federate 8.2.2 as as an authorization server to validate JSON Web Token's upon certain requests. I am trying to validate the signature, so I ...
1
vote
1answer
46 views

Is there a role for overall management for Google Cloud Platform?

I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know). I checked the documentation of GCP and from ...
0
votes
0answers
112 views

Identity providers for SSO and untrusted sites

I am implementing SSO between a custom PHP app and an in house tableau server using SAML. I chose auth0 as my identity provider. I got it working with a test version of the app running in a Vagrant VM....
2
votes
1answer
788 views

Grant users ssh access to instance in google compute project using IAM

We have a number of linux VMs (google compute engines) in our projects on google cloud. I want to allow the users (developers) access to the google compute engines using SSH only. No ability to change ...
7
votes
0answers
119 views

Sunsetting Microsoft Identity Management for Unix the right way

I'd like to make sure that we don't have any connections to our AD controllers before sunsetting, but some run Microsoft Identity Management for Unix / Server for NIS. I'm having a dog of a time ...
-3
votes
1answer
467 views

What exactly is Identity server and what is the purpose of using it

Currently I am working on a single sign on middleware application and I am confused with identity server and LDAP. I got to know LDAP is used for identity provisioning means it contains user records ...
1
vote
1answer
189 views

Linux equivalent of Unix who -m command, to show original user ID before su?

I'm trying to find a Linux equivalent of running who -m in Unix. In Unix, who -m gives the first user ID you used to log in, before starting any new shell sessions through su, etc. The -m switch to ...
0
votes
1answer
3k views

Azure AD Connect Import

I'm running into an issue with the latest version, 4.1.1.180, that I can't resolve. After installation, the AD Connector is now failing and throwing errors. They fail on the import and export run ...
0
votes
1answer
44 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
0
votes
0answers
104 views

FIM Wrong accountType error

I have an Active directory containing an universal security group named GG_H_W4M2MD it has several members. I have a "normal" user account named 26626. Both are managed using FIM 2010 R2 (Forefront ...
2
votes
2answers
204 views

Cannot create a user in IPA server for remote login

I had created a new IPA IdM server in Centos 7 using script install-ipa-server. The installation was successful. After installation, I was not able to create a user using IPA user-add user, it asks ...
0
votes
1answer
559 views

RHEL 7/CENT0S 7 IPA/IDM transitive trusts

I have a situation I am having a hard time getting a clean answer on. I have a IDM/IPA domain setup and I have a trust setup with my Windows domain. That part is working perfectly. I have a one ...
0
votes
1answer
293 views

Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting

My environment requires me to be able to create Exchange mailboxes on existing users, disable those mailboxes and then, some time later, re-enable them and have Exchange reconnect them automatically ...
-1
votes
1answer
94 views

Best practice for organisation wide user management [closed]

We have a green fields environment (kinda) in which our Active Directory is currently the most canonical source of people information. As our organisation grows to 400+ employees we need a way to ...
1
vote
0answers
86 views

Oracle Identity Manager and Microsoft Read-Only Domain Controllers

Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC) My setup has OID importing users from AD RODC. Is this configuration supported?...
30
votes
2answers
23k views

How could I stop ssh offering a wrong key?

(This is a problem with ssh, not gitolite) I've configured gitolite on my home server (ubuntu 12.04 server, open-ssh). I want an special identityfile to administer the repositories, so I need to ...
1
vote
1answer
520 views

Active Directory 2008 R2 Identity Management for Unix Default Attriubutes

Forgive me if this has already been answered elsewhere but I'm yest to find a definitive answer. I'm using AD 2008 R2 and have Identity Management for Unix installed adding the Unix Attributes tab to ...
2
votes
3answers
1k views

There is anything to consider in change IIS Pool Identity to Network Service instead ApplicationPoolIdentity?

I'm facing a problem with IIS Pool Identity. I need to give right permissions to it user, but i cannot find the user that is setted to the IIS Pool Identity, that is ApplicationPoolIdentity. I find ...
3
votes
2answers
251 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
0
votes
2answers
118 views

Possible options for knowing user's identity without using a user account

I am managing a network in a condominium. Right now, I am looking for a method for logging the users' activities without using a user login system. We have this login system not long ago, but people ...
3
votes
1answer
1k views

Active Directory memberOf LDAP syntax

I want to add a user (from Sun IDM to Active Directory) to more than one group. The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
5
votes
4answers
531 views

Active Directory New User Workflow

I work in a small organization that uses a single file & print server with an Active Directory domain for user management. The office admin who inducts new people is non-technical and generally ...
6
votes
2answers
3k views

Account management tools supporting self-service registration and email verification? [closed]

I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly ...
1
vote
1answer
80 views

Novell Identity Manager (NIM) 3.6: How to make an image part of the resources for HTML reports?

This question might not belong here, and since this is related to an identity management product, I thought I could ask nonetheless. I'm currently working to list all of the user identities in ...
3
votes
1answer
3k views

SQL Server 2008: what happened if identity oversteps a maximal value of int?

Imagine we have a table: create table MYTABLE ( id int IDENTITY(1,1) ,name varchar(10) ) We have to insert a lot of rows into the table. Does anybody know what will happen when a generated ...
0
votes
2answers
4k views

What are industry standards and professional best practices in network hosts naming? [duplicate]

Possible Duplicate: Naming convention for computers It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host diverse ...
3
votes
3answers
6k views

How to fix “Could not open a connection to your authentication agent.” error when trying to add ssh-key?

I'm using Ubuntu server 10.04. ssh-add /foo/cert.pem gave the following output: Could not open a connection to your authentication agent. These are my running processes: ps -aux | grep ssh ...
1
vote
1answer
1k views

Trouble with Identity Range Sizes

I am trying to setup our replication with a republisher. We, unfortunately, have some tables with an int PK IDENTITY and I am getting the following error when trying to create the publication. SQL ...
1
vote
1answer
521 views

Forefront Identity Manager 2010 copy/update an OU from one domain to another

Basically the idea is to copy and update 1 OU in the master Domain into slave Domain. The OU will have users and groups in it. If a new user is created in the master domain they will be created in the ...
0
votes
1answer
287 views

Migrating Identity Providers - specifying a new users password hash

We'd like to switch Identity Provider (and Web Access Manager), and also the user directory we use, but would like to do so without users needing to change their password. We currently have the SSHA ...
1
vote
2answers
2k views

FIM 2010 GAL MA - It appears this forest is not exchange enabled

I am trying to configure a Management Agent (MA) for Global Address List (GAL) sync in FIM 2010. I cannot move to the next step from "Configure GAL" because of an error message saying "It appears this ...
4
votes
5answers
6k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
0
votes
2answers
442 views

Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?

It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
7
votes
4answers
2k views

Giant active directory deployment vs giant Sun LDAP

At work we're in the early phases of an identity management project. This is all in the context of higher ed where we have a couple thousand faculty / staff and about twenty thousand students. Has ...
2
votes
1answer
423 views

Unix services on Windows Server 2008

Looking to remove a domain controller that is currently the NIS master for our identity management for unix service. Need to know how to migrate the master to a different Windows server. When you ...
3
votes
4answers
336 views

Which identity management products are suitable for small to medium business?

Let's scope out an average setup: Web company About 50 users A few User Groups (Management, Support, Developers, Sys-Admins, Testers, Sales) A bunch of permissions (Only management is allowed to ...
2
votes
4answers
3k views

Relative strengths and weaknesses of various Identity Management solutions you have used

This is somewhat more of a survey question, than a specific question. (I assume that is still ok). I work as a consultant doing Identity Management projects. We focus mostly on Novell's Identity ...
7
votes
4answers
4k views

What tools exist for identity management w/ Active Directory? [closed]

What products do you use to manage identity propagation in your environment? For example, Joe gets hired at the company. HR inputs Joe's profile in the HR employee management application. A ticket ...