Blog

OpenLDAP for sudo configuration and rights

Sun, 05/28/2023 - 11:50

We covered SSH Authentication and Linux user management using OpenLDAP in an article, now wouldn't it be great if you could also manage sudo rules from a central place like an LDAP server? Luckily, sudo has support for this! This article will show you how to set this up within OpenLDAP and the sudo configuration on your Linux machine.

Reverse SSH tunnel for port forwarding

Sat, 05/27/2023 - 23:12

Reverse SSH tunneling is a powerful tool that can be used to securely forward ports to or from remote servers to your local machine. It is especially useful when you don’t have direct access to a remote server, such as in a cloud environment. By creating a secure tunnel between the remote server and your local machine, you can access services on the remote server as if they were running on your own machine.

Hacking the parking gate

Wed, 11/23/2022 - 09:00
External post on: engineering.q42.nl

How we rapidly developed an internal tool from idea to prototype within a limited amount of time at Q42!

Hosting a successful GPG Keysigning Party

Tue, 11/22/2022 - 23:00

A GPG Keysigning party is an event where people verify each other's identity and sign their GPG keys. Doing so increases the effectiveness of the "Web of trust" and the total trust each key has.

Using Python to migrate DigitalOcean domains to Terraform managed

Tue, 03/15/2022 - 01:25

I was thinking about migrating some cloud services into Terraform, but we seemed to have too many domains. So I wrote a small python script that takes a domain, then using doctl (the DigitalOcean command line) it extracts all current records. After that it outputs the file into tf and also gives a import command to import the current state in Terraform state.