Learnings am Wegesrand: Für die Signierung und Verschlüsselung von #SAML-Metadaten nutzt man wegen der häufigen Rotationen und fehlender Automatisierungsmöglichkeit bei Kommunikationspartnern ja meist keine Letsencrypt-Zertifikate. Gestern dachte ich, ach für diesen kurzen Test geht’s mal. Und dann habe ich lange nach dem Fehler gesucht und gemerkt, dass Letsencrypt inzwischen EC-Schlüssel statt RSA generiert,mit denen der #Shibboleth SP nicht signieren kann. #til #sso #singlesignon

Today's #Canadian #shibboleth

How to tell if "sorry" is just "fuck you" in code:

Unless someone specifically says "I'm sorry" it's probably "fuck you", except if someone uses "sorry" as an interjection like "Yeah sorry I was gonna (x)". If you step on someone's foot and they say "sorry" they aren't apologizing. It's short for "Look where ta fuck yer goin buddy before I fuckin dummy ya right here."

Tomorrow: How to tell where someone is from depending on how they pronounce "Toronto".

Some members of the underground community of "Where Eagles Dare" aficionados are known to murmur "Broadsword calling Danny Boy" as they enter a drinking establishment, a room with many people, or other social settings, in hopes of hearing a corresponding response from a nearby fellow enthusiast.
#AlistairMacLean #shibboleth

Single Sign-on-Weisheiten...

Ctrl-Shift-L
Ctrl-Shift-D
Ctrl-Shift-B
Ctrl-Shift-T
Ctrl-Shift-E

The Vulcan nerve pinch of package development in #RStudio !

Kenne ich hier jemanden, der sich mit #Shibboleth, #SAML, Fujitsu #Securon auskennt?

Ich möchte Debian-Rechner so konfigurieren, dass sich Benutzer bei der Anmeldung am System am (entfernten) IdM authentifizieren können und dann lokal mit einen (temporären ?) Account an einer GUI arbeiten können.

Ich denke, dass das mit #PAM gehen sollte (mit pam_krb5, pam_winbind und pam_mkhomedir ging es ja auch schon am ActiveDirectory), wünsche ich mir aber noch etwas Starthilfe, etwa in Form eines HowTo's.

Diese Ansatzpunkte habe ich schon gefunden:
https://github.com/biancini/Shibboleth-Authentication

https://github.com/univention/crudesaml

https://github.com/ck-ws/pam-script-saml

“Donald Herbert Hoover Trump.”

That is an interesting turn of phrase.

This is a #shibboleth to the Silent Generation, and their children, the Boomers who grew up with traumatized parents.

#TIL when you test OIDC logins with an mod_auth_openidc RP and you have a SAML test SP with mod_shib in the same web server and the two modules protect different directories they will still interfere. To get OIDC to work it‘s not enough to a2dissite the SAML vhost and to stop shibd but you also have to a2dismod shib otherwise authz core doesn’t get the message… ¯\_(ツ)_/¯

Ein @univention -Kollege und ich fahren am Wochenende zu meiner Lieblingsveranstaltung, den Chemnitzer Linuxtagen.

Für Sonntag morgen hab ich Input im Gepäck: Ich versuche mich in einem einführenden Rundumschlag zum Thema Single Sign-on für Webanwendungen. Was ist das überhaupt? Nimmt man SAML oder OIDC? Shibboleth IdP oder Keycloak?
Schaut vorbei - ich freue mich!

https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/213

@nadiaalbelushi

The subconscious understanding and placement of the term #MilitaryAgeMale is a somewhat useful #shibboleth

If you have opinions about different Authentication-stacks, @yunohost is currently considering which would be the best fit for #FreeSoftware #selfhosting.

https://github.com/YunoHost/issues/issues/676

https://github.com/YunoHost/issues/issues/2240

@lemonldapng #authelia #dex #keycloak #shibboleth #kaidm #ory #authentik #Glewlwyd #zitadel

#SAML is nice in theory, but in practice it's pretty painful to work around the various different implementations. Currently we're troubleshooting a #Shibboleth IDP metadata file that #Webex was perfectly happy with, but which #Cisco #CUCM and #CUC don't seem to like.

Mache Wörter im Deutschen finde ich auch unnötig grausam auszusprechen für Menschen, die gerade Deutsch lernen (vermute ich zumindest). Looking at you, „Durststrecke“ und „Kunstsprache“. #Shibboleth

Are you (planning on) integrating with #SAML in your #Clojure web service?

I made this library that turns a Pedestal web service into a SAML Service Provider: https://github.com/kuhumcst/pedestal-sp

It is actually pretty nice. The best part is that you don't have to use #Shibboleth at all. The second best part is the decoupled way that you handle authorisation at different levels, both frontend and backend.

I still mentally correct certain words I read, sometimes. I hear them in my head mispronounced, at first:

Misled is always "myzl'd"
Ignominious is "igNOMinous"

There are at least a dozen others, though I can't think of them right now.

Being an academic involves putting on an act for others, at least sometimes. I think this is true for everyone, though not equally.