Authentik - David Buhlman

Sign in Subscribe

Authentik

A collection of 21 posts

Calibre-Web Integration with Authentik, Part Two

Calibre-Web Integration with Authentik, Part Two

So when I come back to this today I begin by running into a number of connection errors getting Calibre-Web to connect to Authentik Security's LDAP server. It looks like the LDAP requests are not passing through the proxy. Steps performed in Calibre-Web * Click on Admin * Click on

Calibre-Web Integration with Authentik

Calibre-Web Integration with Authentik

With my success yesterday integrating Tandoor Recipes with Authentik I want to keep the ball rolling and decide to see if I can get Calibre-Web integrated. A quick good search brought me upon Calibre-Web's documentation about LDAP Login. It starts by mentioning some additional packages and dependencies to

Tandoor Recipes Integration with Authentik

Tandoor Recipes Integration with Authentik

My wife has shown some interest in using Tandoor Recipes and instead of having her have to remember a number of different usernames and passwords for any of these applications I'm playing with, or having to manage a number of different usernames and passwords for her, I would

Docker Consolidation Project, Part Seven

Docker Consolidation Project, Part Seven

I'm going to start today by setting up some backups on DOCKER-01. Backup Actual So I better get a backup script up and running for Actual Budget. I write up a draft in Github called actual-backup.sh #!/bin/bash ### actual-backup.sh - Backup script for the Actual Budget

Docker Consolidation Project, Part Five

Docker Consolidation Project, Part Five

Migrate Authentik Security Migrate Authentik Security's Data Well my testing this morning was successful with Authentik and Bookstack so the data transfer was successful. I can move on to decommissioning. Decommission AUTHENTIK-01 Steps performed on AUTHENTIK-01 * sudo shutdown now Steps performed on HV-03 via Windows Admin Center * Navigate

Docker Consolidation Project, Part Four

Docker Consolidation Project, Part Four

Migrate Authentik Security So this will be an interesting one since I have foolishly not set up any backups for it yet. I did find some documentation for a backup. docker-compose run --rm worker backup Install Authentik Security on DOCKER-01 Steps performed on DOCKER-01 * sudo mkdir /apps/Authentik-Security After installing

Upgrade Debian Operating System, Part Two

Upgrade Debian Operating System, Part Two

I'm continuing to work through upgrading all of my Debian virtual machines. Upgrade PH-01 Steps performed on PH-01 * cat /etc/os-release * PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" * sudo apt-mark showhold * sudo apt update * 3 packages can be upgraded. * sudo apt upgrade * sudo apt full-upgrade * sudo

Bookstack Integration with Authentik, Part Two

Bookstack Integration with Authentik, Part Two

So the issue ended up being that Active Directory and Authentik were using the email address [email protected] for the administrative account, and Bookstack's administrative account, named david was also associated with the email address [email protected], which was trying to sync to my Active Directory/

Bookstack Integration with Authentik

Bookstack Integration with Authentik

Today I am going to see if I can get the Bookstack integration working. Step 1 Steps performed in Authentik Security * I open the Admin Interface * I navigate to Applications * I click on Providers * I click on Create * I select SAML Provider * I click Next * Name: Bookstack * ACS URL: https:

Authentik Security, Part Twelve

Authentik Security, Part Twelve

Configure Authentik Enable LDAPS Part 3. Install and Configure Active Directory Federation Service (ADFS) Today I am going to pick up where I left off yesterday. I am hoping I can finish up part 3 today. Steps performed from desktop * From a browser go to https://fs-01.domain.local/adfs/

Authentik Security, Part Eleven

Authentik Security, Part Eleven

Configure Authentik Enable LDAPS Part 3. Install and Configure Active Directory Federation Service (ADFS) Steps performed on fileserver via mmc.exe * Click on File then Add/Remove Snap In * Select Certificates then click Add * Select Computer Account then click Finish, then OK * Right click on Personal * Navigate to All Tasks

Authentik Security, Part Ten

Authentik Security, Part Ten

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller I made some progress the past few days so hopefully now I can make some progress and finish up part two. Steps performed on desktop via Server Manager * Right click on DC-04 and select Certificate Templates * Click on

Authentik Security, Part Nine

Authentik Security, Part Nine

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller Well I don't have much time for this today but I was able to confirm that the RSAT tools were all installed successfully. The great news is that Certificate Authority is available now in Server Manager.

Authentik Security, Part Eight

Authentik Security, Part Eight

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller I'm coming back to this today. Let's get part 2 completed. It looks like I may have missed that the role Certificate Enrollment Web Services needs to be installed. So I install it to

Authentik Security, Part Seven

Authentik Security, Part Seven

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller The first step of part two is to open Certification Authority from Server Manager, but Server Manager on my desktop does not give me that option even though it lists DC-04 as an AD CS. Closing and reopening

Authentik Security, Part Four

Authentik Security, Part Four

Configure Authentik Enable LDAPS I've spent some time looking into this today and it appears the issue is that the certificate is set up correctly, but that my desktop does not trust it. It looks like the best practice would be to set upa CA to issue and

Authentik Security, Part Three

Authentik Security, Part Three

Configure Authentik So I'd like to connect my lab's Active Directory to Authentik. It would be great to use the accounts already set up there, and I'll need to know that's working first before I connect my other applications right? So this

Authentik Security, Part Two

Authentik Security, Part Two

Install Authentik Steps performed on AUTHENTIK-01 * sudo mkdir /apps * sudo mkdir /apps/authentik * sudo wget https://goauthentik.io/docker-compose.yml * sudo apt install pwgen * sudo ech "PG_PASS=$(pwgen -s 40 1)" >> .env That's throwing out errors at me. I'm guessing it&

Authentik Security

Authentik Security

So I have a couple of applications up and running now, which means I know have a bunch of different usernames and passwords. It'd be great if I can replace them all and just have one login across these applications. It seems like two big players in the