<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Nix on Benny Simmonds</title>
    <link>https://www.bencode.io/categories/nix/</link>
    <description>Recent content in Nix on Benny Simmonds</description>
    <generator>Hugo -- 0.149.1</generator>
    <language>en-us</language>
    <lastBuildDate>Fri, 12 Dec 2025 08:07:00 +1100</lastBuildDate>
    <atom:link href="https://www.bencode.io/categories/nix/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Managing multiple SSH GitHub identities</title>
      <link>https://www.bencode.io/posts/multi-ssh/</link>
      <pubDate>Fri, 12 Dec 2025 08:07:00 +1100</pubDate>
      <guid>https://www.bencode.io/posts/multi-ssh/</guid>
      <description>&lt;p&gt;Now I&amp;rsquo;m involved in multiple businesses, I&amp;rsquo;m finding I need to frequently juggle multiple SSH key pairs (aka identities) with &lt;em&gt;choose your favourite git offering&lt;/em&gt; (e.g. GitHub). When I push and pull to origins on the same machine, I need to alternate the identities I use.&lt;/p&gt;
&lt;p&gt;The best approach is to use an &lt;strong&gt;SSH config file&lt;/strong&gt; to define host aliases. This lets you seamlessly use different keys without manually switching anything.&lt;/p&gt;</description>
    </item>
    <item>
      <title>SSO with Active Directory</title>
      <link>https://www.bencode.io/posts/2019-01-04-directory-services/</link>
      <pubDate>Fri, 04 Jan 2019 11:10:10 +0000</pubDate>
      <guid>https://www.bencode.io/posts/2019-01-04-directory-services/</guid>
      <description>&lt;p&gt;Providing SSO by integrating Linux (or FreeBSD) with a directory service, like Microsoft Active Directory (AD), is no where as daunting as it once was, and highlights some fascinating subsystems that enable users to be defined from a variety of data sources (such as LDAP) other than just the traditional &lt;code&gt;/etc/passwd&lt;/code&gt; file.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#initial-setup&#34;&gt;Initial setup&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#kerberos&#34;&gt;Kerberos&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#create-service-keytab-on-ad&#34;&gt;Create service keytab on AD&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#system-security-services-daemon-sssd&#34;&gt;System Security Services Daemon (sssd)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#name-service-switch-nss&#34;&gt;Name Service Switch (nss)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#pam-pluggable-authentication-module&#34;&gt;PAM (Pluggable Authentication Module)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#testing&#34;&gt;Testing&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#listing-users&#34;&gt;Listing Users&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#listing-groups&#34;&gt;Listing Groups&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#id&#34;&gt;id&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#troubleshooting&#34;&gt;Troubleshooting&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#samba-smbd-join-issues&#34;&gt;Samba (smbd) Join Issues&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#clock-synchronisation-issues&#34;&gt;Clock Synchronisation Issues&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#clearing-sssd-cache&#34;&gt;Clearing SSSD Cache&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#end-to-end-script-for-ansible&#34;&gt;End to end script (for Ansible)&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h1 id=&#34;initial-setup&#34;&gt;Initial setup&lt;/h1&gt;
&lt;p&gt;Update &lt;code&gt;/etc/resolv.conf&lt;/code&gt; to bind to the AD DNS server. This will enable &lt;code&gt;realmd&lt;/code&gt; to discover and join the active directory domain (i.e. kerberos realm).&lt;/p&gt;</description>
    </item>
    <item>
      <title>GnuPG</title>
      <link>https://www.bencode.io/posts/gpg/</link>
      <pubDate>Sun, 02 Mar 2008 17:16:07 +0000</pubDate>
      <guid>https://www.bencode.io/posts/gpg/</guid>
      <description>&lt;p&gt;This semester I have enrolled in a &lt;a href=&#34;http://www.canberra.edu.au/courses/index.cfm?action=detail&amp;amp;subjectid=6697&amp;amp;year=2008&#34;&gt;security unit&lt;/a&gt; at my local University. Before we get into the mechanics of modern security techniques (mathematical theory, ciphers, protocols, hashing, Kerberos), the first lecture kicked off with a gentle overview of PKI and the basics of using the &lt;a href=&#34;http://gnupg.org/&#34;&gt;GNU Privacy Guard&lt;/a&gt;, aka GnuPG or GPG for short. In short it is a complete and free implementation of the OpenPGP standard.&lt;/p&gt;
&lt;p&gt;Generate a key pair:&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
