Category Archives: Uncategorized

lcfg-x509 and letsencrypt

Automated acquisition of X509 certificates is an important part of our infrastructure. We obtain certificates of two different types, both provided through services offered by the University: Certificates provided via JISC, which are signed by a CA trust chain whose … Continue reading

Posted in Uncategorized | Comments Off on lcfg-x509 and letsencrypt

openldap client and sssd

For the port of LCFG to SL7, we have been thinking about our LDAP client provision. Historically we have run a full slapd server on all clients, replicating hourly from the master. This was largely for reasons of stability and … Continue reading

Posted in Uncategorized | Comments Off on openldap client and sssd

Changes to kdcregister

In Informatics we have, for years, used the kdcregister program to obtain keytabs for host-based kerberos principals from the KDC. An important part of this usage is to obtain keytabs when a machine is being installed. This has historically worked … Continue reading

Posted in Uncategorized | Tagged , , , | Comments Off on Changes to kdcregister

Hello world!

It’s my intention to document ongoing things here (rather than just in plain-text files seen only by me). We’ll see how I get on. Perhaps the first thing I’ll do is investigate different ways of typing this stuff in, as … Continue reading

Posted in Uncategorized | Comments Off on Hello world!