New answers tagged freeipa
0
Yes, you can allow access to Kerberos and LDAP directly over the internet. Carefully.
Kerberos was designed to run over untrusted networks.
Only run LDAP over TLS; disable unencrypted service. Limit what an anonymous user can query. Check how sensitive data in LDAP is, would there be a compliance or legal problem if some PII leaked?
Knowing a user's IP ...
1
While it is not recommended for production purpose, you could run freeIPA as a docker container with the ports 80 & 443 reassigned.
If you want to use the FreeIPA server not just from the host where it is running but from external machines as well, you can use the -p options to make the services accessible externally. You will then likely want to also ...
Top 50 recent answers are included
