Personally, I investigated how to set up Keycloak and make it possible to use Windows Hello to authenticate using a passkey. Mind that to simplify things, I just created a realm where only this kind of authentication is supported. Flows Policies Failed to register your Passkey. invalid cert path Solution: In my case, it was […]
Keycloak: WebAuthn Read More »
Note: Written on the 13th of March, 2024. Consider that features may have changed in the meantime. As a one man business, a side business actually, I had difficulties managing the complexity of an accountant in Belgium. While originally my profits were small and I was looking to cut down on costs, I realized I
Self accounting: Accountable vs. Dexxter vs. CoManage. Read More »
It’s possible to require Kerberos authentication before allowing access to a web application, let’s say served by an Apache2 web server. In practice, for one of my favorite web applications (iTop); it means internal domain users could be automatically authenticated. They would not need to provide their credentials and there’s no need to configure an
Kerberos authentication against Apache2 Read More »
In February 2024, I had to troubleshoot an issue with a Python-based Duo implementation. There were two things I wanted to check manually, using cURL. Based on some googling, I came up with the following snippet to check if authenticating to the API worked. These resources were very helpful: Eventually, it worked and provided me
Duo Security API – How to test Read More »
What is Keycloak? Keycloak is a versatile open source identity and access management solution. You’ll see that it is often used as an external Identity Provider (IdP). You can put Keycloak in front of your web application (for example iTop, Awingu / Parallels Secure Workspace, …), and users would authenticate to it. Once authenticated to
Installing Keycloak on Ubuntu Server 22.04 Read More »
Recently I installed an Ubuntu Server 20.04 LTS in a virtual machine on VM Workstation Player 17. For some reason, while I did create a 20 GB disk, I quickly got a warning that my disk space was nearly full. Having used Ubuntu for a while, I was surprised to see my 20 GB would
Increasing disk space on Ubuntu Server 20.04 LTS Read More »
A.I. (artificial intelligence) is the buzzword nowadays, especially in sales pitches. Expectations are high. However, it’s crucial to keep in mind what A.I. means. A simple definition from Wikipedia: Artificial intelligence (AI) is the intelligence of machines or software, as opposed to the intelligence of humans or animals. Now, when researching how A.I. can be
A.I. vs. automation of workflows in customer support (using iTop) Read More »
In some scenarios, you want to generate a custom subCA certificate which can actually issue (smart card) certificates for users in a domain. It gets more complex however when the Certificate Authority is a Microsoft Windows Server which is not joined to the (same) Microsoft Windows domain. You might see similar behavior: The workaround is
Generating custom subCA certificate on a non-domain joined Microsoft Windows Server Read More »
I’m often asked about what kind of services I offer as a freelancer. Besides selling iTop extensions, you can also contact me for freelance iTop help: Notice: JavaScript is required for this content.
