FreeIPA Bastion

[G Col]

Hello Team,

I was wondering how I can configure FreeIPA as a bastion server when I ssh other hosts.
Basically FreeIPA would be in the middle of the ssh approval to access to the specific
server via ssh. Is a functionality that FreeIPA has at the moment?

Thank you for your help,
gcol

[Ernedin Zajko]

Hi there,
Maybe something like this:
https://github.com/aker-gateway/Aker

On Wed, May 19, 2021, 17:24 G Col via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  Hello Team,
>
>  I was wondering how I can configure FreeIPA as a bastion server when I ssh
>  other hosts.
>  Basically FreeIPA would be in the middle of the ssh approval to access to
>  the specific server via ssh. Is a functionality that FreeIPA has at the
>  moment?
>
>  Thank you for your help,
>  gcol
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>

[Harry G. Coin]

While you're at it, you will catch further bugs (including likely named
crashing) if your tests enable dnssec on several domains at the same
time, then test them all.  It's not enough to just turn on dnssec on one
domain and test it then call it 'ok'.

HC


On 5/19/21 11:50 AM, Ernedin Zajko via FreeIPA-users wrote:
>  Hi there,
>  Maybe something like this:
>  https://github.com/aker-gateway/Aker
>  <https://github.com/aker-gateway/Aker>
>
>  On Wed, May 19, 2021, 17:24 G Col via FreeIPA-users
>  <freeipa-users(a)lists.fedorahosted.org
>  <mailto:[e-mail]>> wrote:
>
>      Hello Team,
>
>      I was wondering how I can configure FreeIPA as a bastion server
>      when I ssh other hosts.
>      Basically FreeIPA would be in the middle of the ssh approval to
>      access to the specific server via ssh. Is a functionality that
>      FreeIPA has at the moment?
>
>      Thank you for your help,
>      gcol
>      _______________________________________________
>      FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      To unsubscribe send an email to
>      freeipa-users-leave(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      Fedora Code of Conduct:
>      https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>      <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
>      List Guidelines:
>      https://fedoraproject.org/wiki/Mailing_list_guidelines
>      <https://fedoraproject.org/wiki/Mailing_list_guidelines>
>      List Archives:
>      https://lists.fedorahosted.org/archives/list/[e-mail]...
>     
> <https://lists.fedorahosted.org/archives/list/[e-mail]...
>      Do not reply to spam on the list, report it:
>      https://pagure.io/fedora-infrastructure
>      <https://pagure.io/fedora-infrastructure>
>
>
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[G Col]

Hi Ernedyn and Harry,

Does this mean that FreeIPA doesn't have this functionality?

Aker I understand is a different piece of software not related with FreeIPA? My version is
4.6.8.
About those bugs mentioned, is this referring to the Aker implementation with FreeIPA?

Thank you for your help.
gcol

[G Col]

Not sure about your previous messages. Let me know if you can help me with this. I really
appreciate it.

Thank you for your help,
gcol