Category Archives: Uncategorized
lcfg-x509 and letsencrypt
Automated acquisition of X509 certificates is an important part of our infrastructure. We obtain certificates of two different types, both provided through services offered by the University: Certificates provided via JISC, which are signed by a CA trust chain whose … Continue reading
openldap client and sssd
For the port of LCFG to SL7, we have been thinking about our LDAP client provision. Historically we have run a full slapd server on all clients, replicating hourly from the master. This was largely for reasons of stability and … Continue reading
Changes to kdcregister
In Informatics we have, for years, used the kdcregister program to obtain keytabs for host-based kerberos principals from the KDC. An important part of this usage is to obtain keytabs when a machine is being installed. This has historically worked … Continue reading
Hello world!
It’s my intention to document ongoing things here (rather than just in plain-text files seen only by me). We’ll see how I get on. Perhaps the first thing I’ll do is investigate different ways of typing this stuff in, as … Continue reading