Introduction Steps Does it work? Introduction I recently got a Soekris net6501 box that I wanted to configure as a wireless/wired router. However, the box has no mouse/keyboard or monitor connections, only a serial console, and I don't have the right cable. (I know, surely everybody has RS232 …

Understanding the filesystem structure Back up filesystem data Create an encrypted filesystem and restore data Fix up references to the old filesystem Fix boot issues Cleanup References I had a Fedora 23 system that I decided I would like to be encrypted. I could have just backed up my documents …

Introduction Simple approach: data rules only Current solution: See if something renders Issues Alternative: Declare data dependencies Suppressing excess commas and newlines Conclusions Appendix Introduction This post is a followup to Thinking about templating for automatic CSR generation. In it we will look at a requirement of the templating system …

Background Requirements Implementations Two-pass data interpolation Two-pass template interpolation Template-based hierarchical rules Formatter-based hierarchical rules Conclusions Background I am working on a project (ticket, design) to simplify creating certificates in FreeIPA. Currently administrators must generate a Certificate Signing Request (CSR) matching the type of certificate they wish to issue. They …

The subject of this blog post will be FreeIPA Ticket #5873, a request to fix the warning messages produced when compiling FreeIPA: automake: warning: possible forward-incompatibility. automake: At least a source file is in a subdirectory, but the 'subdir-objects' automake: automake option hasn't been enabled. For now, the corresponding …

This post records the results some experimentation with the Dogtag API. Specifically, we will show how to authenticate against the API using credentials that are automatically generated by FreeIPA installation, how to use debug tools distributed with certmonger to issue certificates via the API, and a method of tweaking the …