~/tags
Freeipa
I Made swamp Deploy swamp
I stood up 'swamp serve' as its own FreeIPA service account using nothing but swamp models. The tool configured the host that runs the tool, and then my own OAuth flow spent an …
I Violated the Geneva Conventions by Implementing Kerberos in TypeScript
The FASJSON model only spoke Kerberos, so my swamp had to kinit. I got annoyed enough to reimplement the client half of GSSAPI in TypeScript with no subprocess, and then the …
The WiFi Certificate That Didn't Exist an Hour Ago
I taught swamp to drive FreeIPA, then used it to issue my laptop an 802.1X client cert and get onto my own network. Mostly this is about knowing when to write things down.