Questions tagged [identity-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
23 views

Configure a third party IDP (via SAML) as primary authenticator for windows login on Windows Active Directory

I got an Active Directory environment with AD users. Now I need to configure a third-party Identify Provider (IDP is managed by me in another environment) via SAML (Idp support saml and oidc) for ...
  • 109
0 votes
0 answers
14 views

VmWare vRealize 8.8 Create a local user without a mail server

I try to create a local user by the Identity Manager. I go to the Administration Console and select Users & Groups and add an user accont there. But the IM sends only a link for password by e-...
0 votes
1 answer
265 views

How do you change an Office 365 identity to an external identity?

How do I change (downgrade or convert) an existing Office 365 user to a guest user with an external identity? I can change a user's User Type from 'Member' to 'Guest' in the Azure Active Directory ...
  • 51
0 votes
0 answers
83 views

GCP - Internat Aware Proxy (IAP) using only "SSH & TCP Resources" (NOT HTTPS resources)

AIM: Enable a few internal websites (hosted on our GCP VMs) to be accessible to the internet w/o VPN. This access must be able to be manually added on a user-by-user or group basis, using Azure as an ...
  • 121
-1 votes
1 answer
46 views

Can I assign port 113 to other service, e.g., like a SSH server, without harming other services? [closed]

I have root access to a server (S), but have no control over the firewalls over the network. I set up a virtual machine (VM) inside the server (S) and wanted some users to access VM directly, i.e., ...
  • 101
0 votes
1 answer
44 views

Link user accounts (hierarchy) with Google Identity Platform

I'm planning on having family accounts and I was wondering if Google Identity Platform allows some sort of hierarchical chain across users. Example: my family consists of three people, but I'm the one ...
  • 111
0 votes
1 answer
412 views

Active Directory + NFS: Why is domain user's uidNumber, gidNumber not shown by `id` command in Windows?

I am connecting NFS v3 shares (ZFS datasets) from a Solaris file server owned by domain users to Windows computers, but the concept should apply to basically any POSIX-style server. I'm hoping to ...
2 votes
1 answer
494 views

Get the actual username of a SSH Client that established a SSH session to a remote server

Let's say we have a user account called john on a CentOS server (192.168.1.1) and on the other side we have a user who owns this account and from time to time uses his account from different locations ...
1 vote
0 answers
23 views

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
  • 11
1 vote
1 answer
291 views

Where does Chrome fetch my identity from after having deleted cookies?

I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication) What I have tried : Delete all cookies, ...
  • 282
1 vote
0 answers
49 views

How can I pass login_hint/authuser to Google IdP when using AWS SSO

I have configured AWS SSO to use Google as an IdP. It's working fine. However, since I have multiple google accounts I often have to go through the multiple login 'chooser'. When accessing Google ...
  • 161
0 votes
1 answer
178 views

Azure Active Directory & Active Directory B2C conflicts

We use Active Directory B2C to allow our client users to login to our web app. Recently we've had users at 2 different client orgs who have been unable to login. They were able to demonstrate the ...
0 votes
1 answer
2k views

How to import ldif users into FreeIPA?

Maybe it needs two steps: Add users defined in the ldif file to OpenLDAP(Inside FreeIPA) Migrate those added users from OpenLDAP to IPA Current situation Setup FreeIPA server, initilized an admin ...
  • 151
0 votes
0 answers
75 views

Apache Syncope Depends on Maven? What is maven for in this context?

fwiw: I did not come into this looking for another CI/CD tool. I came into this looking for an IAM tool (and I found Syncope). When Syncope install documentation called for Maven that's when the ...
  • 1
3 votes
1 answer
769 views

How to Solve unknown_ca error on WSO2IS-5.7 when using MySQL RDS as backstore?

I've tried to install an instance on AWS using aws RDS as my datasource through the mysql-connector-java-5.1.45-bin.jar with jdbc url jdbc:mysql://< instance>.< zone>.rds.amazonaws.com:...
2 votes
1 answer
48 views

Recommendations for future-facing (fully cloud-based) Identity and EMM/UEM Solutions

I have recently started consulting for a tech startup of about 60 users that has grown, and is looking to expand, quickly. Due to the fast growth, and lack of formal IT advice up until now, they are ...
1 vote
1 answer
58 views

Is there a role for overall management for Google Cloud Platform?

I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know). I checked the documentation of GCP and from ...
  • 149
0 votes
0 answers
146 views

Identity providers for SSO and untrusted sites

I am implementing SSO between a custom PHP app and an in house tableau server using SAML. I chose auth0 as my identity provider. I got it working with a test version of the app running in a Vagrant VM....
2 votes
1 answer
3k views

Grant users ssh access to instance in google compute project using IAM

We have a number of linux VMs (google compute engines) in our projects on google cloud. I want to allow the users (developers) access to the google compute engines using SSH only. No ability to change ...
  • 31
7 votes
0 answers
168 views

Sunsetting Microsoft Identity Management for Unix the right way

I'd like to make sure that we don't have any connections to our AD controllers before sunsetting, but some run Microsoft Identity Management for Unix / Server for NIS. I'm having a dog of a time ...
-3 votes
1 answer
573 views

What exactly is Identity server and what is the purpose of using it

Currently I am working on a single sign on middleware application and I am confused with identity server and LDAP. I got to know LDAP is used for identity provisioning means it contains user records ...
1 vote
1 answer
365 views

Linux equivalent of Unix who -m command, to show original user ID before su?

I'm trying to find a Linux equivalent of running who -m in Unix. In Unix, who -m gives the first user ID you used to log in, before starting any new shell sessions through su, etc. The -m switch to ...
  • 33
0 votes
1 answer
8k views

Azure AD Connect Import

I'm running into an issue with the latest version, 4.1.1.180, that I can't resolve. After installation, the AD Connector is now failing and throwing errors. They fail on the import and export run ...
  • 1,284
0 votes
1 answer
71 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
's user avatar
0 votes
0 answers
127 views

FIM Wrong accountType error

I have an Active directory containing an universal security group named GG_H_W4M2MD it has several members. I have a "normal" user account named 26626. Both are managed using FIM 2010 R2 (Forefront ...
  • 121
2 votes
2 answers
340 views

Cannot create a user in IPA server for remote login

I had created a new IPA IdM server in Centos 7 using script install-ipa-server. The installation was successful. After installation, I was not able to create a user using IPA user-add user, it asks ...
  • 21
0 votes
1 answer
792 views

RHEL 7/CENT0S 7 IPA/IDM transitive trusts

I have a situation I am having a hard time getting a clean answer on. I have a IDM/IPA domain setup and I have a trust setup with my Windows domain. That part is working perfectly. I have a one ...
0 votes
1 answer
413 views

Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting

My environment requires me to be able to create Exchange mailboxes on existing users, disable those mailboxes and then, some time later, re-enable them and have Exchange reconnect them automatically ...
  • 66
-1 votes
1 answer
101 views

Best practice for organisation wide user management [closed]

We have a green fields environment (kinda) in which our Active Directory is currently the most canonical source of people information. As our organisation grows to 400+ employees we need a way to ...
1 vote
0 answers
96 views

Oracle Identity Manager and Microsoft Read-Only Domain Controllers

Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC) My setup has OID importing users from AD RODC. Is this configuration supported?...
  • 155
41 votes
2 answers
38k views

How could I stop ssh offering a wrong key?

(This is a problem with ssh, not gitolite) I've configured gitolite on my home server (ubuntu 12.04 server, open-ssh). I want an special identityfile to administer the repositories, so I need to ...
1 vote
1 answer
597 views

Active Directory 2008 R2 Identity Management for Unix Default Attriubutes

Forgive me if this has already been answered elsewhere but I'm yest to find a definitive answer. I'm using AD 2008 R2 and have Identity Management for Unix installed adding the Unix Attributes tab to ...
  • 465
2 votes
3 answers
2k views

There is anything to consider in change IIS Pool Identity to Network Service instead ApplicationPoolIdentity?

I'm facing a problem with IIS Pool Identity. I need to give right permissions to it user, but i cannot find the user that is setted to the IIS Pool Identity, that is ApplicationPoolIdentity. I find ...
4 votes
2 answers
265 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
  • 14.2k
0 votes
2 answers
123 views

Possible options for knowing user's identity without using a user account

I am managing a network in a condominium. Right now, I am looking for a method for logging the users' activities without using a user login system. We have this login system not long ago, but people ...
  • 123
3 votes
1 answer
2k views

Active Directory memberOf LDAP syntax

I want to add a user (from Sun IDM to Active Directory) to more than one group. The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
  • 185
5 votes
4 answers
689 views

Active Directory New User Workflow

I work in a small organization that uses a single file & print server with an Active Directory domain for user management. The office admin who inducts new people is non-technical and generally ...
  • 1,728
6 votes
2 answers
3k views

Account management tools supporting self-service registration and email verification? [closed]

I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly ...
  • 41.4k
1 vote
1 answer
87 views

Novell Identity Manager (NIM) 3.6: How to make an image part of the resources for HTML reports?

This question might not belong here, and since this is related to an identity management product, I thought I could ask nonetheless. I'm currently working to list all of the user identities in ...
4 votes
1 answer
4k views

SQL Server 2008: what happened if identity oversteps a maximal value of int?

Imagine we have a table: create table MYTABLE ( id int IDENTITY(1,1) ,name varchar(10) ) We have to insert a lot of rows into the table. Does anybody know what will happen when a generated ...
  • 145
0 votes
2 answers
4k views

What are industry standards and professional best practices in network hosts naming? [duplicate]

Possible Duplicate: Naming convention for computers It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host diverse ...
  • 3,298
3 votes
3 answers
8k views

How to fix "Could not open a connection to your authentication agent." error when trying to add ssh-key?

I'm using Ubuntu server 10.04. ssh-add /foo/cert.pem gave the following output: Could not open a connection to your authentication agent. These are my running processes: ps -aux | grep ssh ...
1 vote
1 answer
1k views

Trouble with Identity Range Sizes

I am trying to setup our replication with a republisher. We, unfortunately, have some tables with an int PK IDENTITY and I am getting the following error when trying to create the publication. SQL ...
1 vote
1 answer
526 views

Forefront Identity Manager 2010 copy/update an OU from one domain to another

Basically the idea is to copy and update 1 OU in the master Domain into slave Domain. The OU will have users and groups in it. If a new user is created in the master domain they will be created in the ...
's user avatar
0 votes
1 answer
293 views

Migrating Identity Providers - specifying a new users password hash

We'd like to switch Identity Provider (and Web Access Manager), and also the user directory we use, but would like to do so without users needing to change their password. We currently have the SSHA ...
1 vote
2 answers
2k views

FIM 2010 GAL MA - It appears this forest is not exchange enabled

I am trying to configure a Management Agent (MA) for Global Address List (GAL) sync in FIM 2010. I cannot move to the next step from "Configure GAL" because of an error message saying "It appears this ...
  • 304
4 votes
5 answers
7k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
  • 876
0 votes
2 answers
445 views

Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?

It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
  • 1,943
7 votes
4 answers
2k views

Giant active directory deployment vs giant Sun LDAP

At work we're in the early phases of an identity management project. This is all in the context of higher ed where we have a couple thousand faculty / staff and about twenty thousand students. Has ...
  • 11.8k
2 votes
1 answer
461 views

Unix services on Windows Server 2008

Looking to remove a domain controller that is currently the NIS master for our identity management for unix service. Need to know how to migrate the master to a different Windows server. When you ...
  • 432