New answers tagged freeipa
0
Yes, you can allow access to Kerberos and LDAP directly over the internet. Carefully.
Kerberos was designed to run over untrusted networks.
Only run LDAP over TLS; disable unencrypted service. Limit what an anonymous user can query. Check how sensitive data in LDAP is, would there be a compliance or legal problem if some PII leaked?
Knowing a user's IP ...
1
While it is not recommended for production purpose, you could run freeIPA as a docker container with the ports 80 & 443 reassigned.
If you want to use the FreeIPA server not just from the host where it is running but from external machines as well, you can use the -p options to make the services accessible externally. You will then likely want to also ...
Top 50 recent answers are included
Related Tags
freeipa × 200ldap × 51
kerberos × 37
linux × 24
centos × 19
sssd × 19
redhat × 15
authentication × 14
centos7 × 13
active-directory × 12
domain-name-system × 10
certificate-authority × 10
nfs × 8
openldap × 8
ssh × 7
sudo × 7
ssl × 5
nfs4 × 5
389-ds × 5
apache-2.4 × 4
mac-osx × 4
samba × 4
certificate × 4
pam × 4
security × 3