I manage a server where several non-technical users still connect over SFTP with FileZilla, so password authentication remains enabled for their accounts. I already use fail2ban and a…
We manage more than 200 cPanel servers and currently use a bastion or jumpbox as the main access point. I'm looking for practical architecture ideas for auditing staff…
I'm curious if anyone has transitioned away from using CyberArk for managing accounts, returning to standard Active Directory accounts for admin or service access. In our case, we've…
We're starting to explore Privileged Access Management (PAM) to enhance the handling of privileged accounts in our organization. Currently, our setup is a bit of a mishmash between…
I'm in search of suggestions for an affordable on-premises Endpoint Privilege Management (EPM) solution that works with both Windows and Mac systems. I previously tried Admin by Request…
I recently joined a company that uses Duo for two-factor authentication, and I find it overwhelming. Every time I log into SSH, switch users, or use `sudo`, I'm…
Hey everyone! I'm part of an Infrastructure team responsible for managing servers, network, and firewalls. We currently use dedicated Physical Access Workstations (PAWs) for each team member, ensuring…
Hey everyone! I'm running into a bit of a snag with my FreeIPA and FreeRADIUS setup. I have everything working great for user-specific authentication on OpenVPN with FreeRADIUS…
Hey everyone, I'm having a frustrating issue with a new Ubuntu 24.04 machine in my setup. I've got six Ubuntu 22.04 machines that are running perfectly—AD logins and…
Hey everyone, I'm having a frustrating issue with a new Ubuntu 24.04 machine in my environment. We currently have six Ubuntu 22.04 machines that work perfectly with Active…
I'm trying to configure a system where users can only log in if they belong to both Group A and Group B. We've been using access.conf to manage…