New answers tagged

0

Yes, you can allow access to Kerberos and LDAP directly over the internet. Carefully. Kerberos was designed to run over untrusted networks. Only run LDAP over TLS; disable unencrypted service. Limit what an anonymous user can query. Check how sensitive data in LDAP is, would there be a compliance or legal problem if some PII leaked? Knowing a user's IP ...


1

While it is not recommended for production purpose, you could run freeIPA as a docker container with the ports 80 & 443 reassigned. If you want to use the FreeIPA server not just from the host where it is running but from external machines as well, you can use the -p options to make the services accessible externally. You will then likely want to also ...


Top 50 recent answers are included