FIDO devices are supported by the public key types "ecdsa-sk" and "ed25519-sk", along with corresponding certificate types. This is supported in OpenSSH from version 8.2. Debian Buster (stable) delivers version…
Yubikey is a hardware security device. You can use it for two-factor authentication. Here is an example setup for two-factor login for Ubuntu Linux. I recommend to use at least…
Collector Configuration You need the latest Telegraf version which includes the vSphere Plugin! On Ubuntu or Debian you can get it with: wget https://dl.influxdata.com/telegraf/releases/telegraf_1.14.5-1_amd64.deb sudo dpkg -i telegraf_1.14.5-1_amd64.deb Now add…
Galera give you some nice cluster features. Like true Multi-Master configuration, synchronous replication, conflict detection and impromes the maintenance of your MariaDB servers with automatic provisioning, node isolation and rolling…
With Cockpit, you can also manage docker containers. Here is a small example setup: Install Docker apt install apt-transport-https ca-certificates curl gnupg2 software-properties-common curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -…
Cockpit is an easy and simple remote management software for Linux servers. It is now included in Debian 10 Buster.It runs on several Linux distributions, including Debian, Ubuntu, Fedora, CentOS,…
You can add totp-auth to your Guacamole login process. You can use any TOTP App like "Google Authenticator" or "OTP Auth" to add a two-factor authentication to Guacamole. First download…
If you don't want to add all your users to the guacamole db for authentication you can combine the DB authentication with LDAP authentication. (You don't have to modify your…
In 2016, I wrote an article for the Linux Magazine about an personal search engine: * Suchmaschinenserver im Eigenbau (Ausgabe 02/2016)* Go Find It (Issue #186 / May 2016) A…
Currently Guacamole 1.1.0 is not compatible with the default encryption of Windows. If you disable NLA it should work. Open Registry editor 'regedit' and make the following settings: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp]…