Firstyear's blog-a-log
Firstyear's blog
- Posts
- 188 from 5 Jul 2011 to 13 Aug 2026
- Posting
- monthly (7 in the last year)
- Kind
- personal blog
- Feed
- https://fy.blackhats.net.au/rss.xml
2026 4
2025 6
2024 8
2023 7
2022 7
- Why are PBKDF2-SHA256 and PBKDF2_SHA256 different in 389-ds?
- Why Decentralised ID Won't Work
- Where to start with linux authentication?
- Exploring Webauthn Use Cases
- Enable caBLE on your iPhone for testing
- Documentation PR's Welcome - Why Docs Are Not A Beginner Friendly Task
- How CTAP2.0 made UserVerification even more confusing
2021 11
- Nextcloud - Unable to Open Photos Library
- Transactional Operations in Rust
- Results from the OpenSUSE 2021 Rust Survey
- Gnome 3 compare to MacOs
- StartTLS in LDAP
- Getting started with Yew
- Compiler Bootstrapping - Can We Trust Rust?
- Open Source Enshrines the Wrong Privilege
- Time Machine on Samba with ZFS
- Against Packaging Rust Crates
- Getting Started Packaging A Rust CLI Tool in SUSE OBS
2020 18
- Webauthn UserVerificationPolicy Curiosities
- Rust, SIMD and target-feature flags
- Deploying sccache on SUSE
- How a Search Query is Processed in Kanidm
- Using SUSE Leap Enterprise with Docker
- Windows Hello in Webauthn-rs
- User gesture is not detected - using iOS TouchID with webauthn-rs
- docker buildx for multiarch builds
- Developer Perspective on Docker
- virt-manager missing pci.ids usb.ids macos
- Resolving AirPlayXPCHelper Perr NULL kCanceledErr with Apple TV and MacOS
- Building containers on OBS
- 389ds in containers
- APFS (why is df showing me funny numbers?!)
- USG fixing avahi
- Fedora 32 Wallpaper Submission - Story
- Fixing a MacBook Pro 8,2 with dead AMD GPU
- There are no root causes
2019 28
- Concurrency 1: Types of Concurrency
- Concurrency 2: Concurrently Readable Structures
- Packaging and the Security Proposition
- Packaging, Vendoring, and How It's Changing
- Fixing opensuse virtual machines with resume
- Password Quality and Badlisting in Kanidm
- Rust 2020 - helping to get rust deployed
- Recovering LVM when a device is missing with a cache pool lv
- Upgrading OpenSUSE 15.0 to 15.1
- Announcing Kanidm - A new IDM project
- OpenSUSE leap as a virtualisation host
- LDAP Filter Syntax Validation
- Using ramdisks with Cargo
- CPU atomics and orderings explained
- I no longer recommend FreeIPA
- Using 389ds with docker
- Implementing Webauthn - a series of complexities ...
- The Case for Ethics in OpenSource
- Using Rust Generics to Enforce DB Record State
- Debugging MacOS bluetooth audio stutter
- GDB autoloads for 389 DS
- Programming Lessons and Methods
- Meaningful 2fa on modern linux
- Using the latest 389-ds on OpenSUSE
- Structuring Rust Transactions
- SUSE Open Build Service cheat sheet
- The idea of CI and Engineering
- Useful USG pro 4 commands and hints
2018 11
- Nextcloud and badrequest filesize incorrect
- Identity ideas ...
- Work around docker exec bug
- High Available RADVD on Linux
- Rust RwLock and Mutex Performance Oddities
- Photography - Why You Should Use JPG (not RAW)
- Extracting Formally Verified C with FStar and KreMLin
- AD directory admins group setup
- Understanding AD Access Control Entries
- Making Samba 4 the default LDAP server
- Smartcards and You - How To Make Them Work on Fedora/RHEL
2017 17
- Using b43 firmware on Fedora Atomic Workstation
- Creating yubikey SSH and TLS certificates
- What's the problem with NUMA anyway?
- GSoC 2017 - Mentor Report from 389 Project
- So you want to script gdb with python ...
- Time safety and Rust
- indexed search performance for ds - the mystery of the and query
- TLS Authentication and FreeRADIUS
- Kerberos - why the world moved on
- Custom OSTree images
- Your Code Has Impact
- CVE-2017-2591 - DoS via OOB heap read
- LCA2017 - Getting Into the Rusty Bucket
- The next year of Directory Server
- Usability of software: The challenges facing projects
- State of the 389 ds port, 2017
- Openshift cluster administration
2016 31
- The minssf trap
- The mysterious crashing of my laptop
- What's new in 389 Directory Server 1.3.5 (unofficial)
- Block Chain for Identity Management
- Can I cycle through operators in C?
- tracking down insane memory leaks
- NSS and OpenSSL Command Reference
- LDAP Guide Part 4: Schema and Objects
- LDAP Guide Part 3: Filters
- LDAP Guide Part 2: Searching
- LDAP Guide Part 1: Foundations
- GDB: Using memory watch points
- lock free database
- Zero Outage Migration Of Directory Server Infrastructure
- Acis for group creation and delegataion in DS
- systemd is not monolithic
- 389ds on freebsd update
- The future vision of 389-ds
- Disabling journald support
- Enabling the 389 ds nightly builds
- 389 ds aci linting tool
- Trick to debug single files in ds
- Blog migration
- ldctl to generate test objects
- Patches Welcome
- Failed to delete old semaphore for stats file
- Securing IPA
- 389 on freebsd
- Renaming ovirt storage targets
- Running your own mailserver: Mailbox rollover
- FreeRADIUS: Using mschapv2 with freeipa
2015 23
- db2index: entry too large (X bytes) for the buffer size (Y bytes)
- Load balanced 389 instance with freeipa kerberos domain.
- Debbuging and patching 389-ds.
- ns-slapd access log notes field
- The hidden log features of ns-slapd
- Where does that attribute belong?
- Ldap post read control
- Magic script for post install interface configuration
- python gssapi with flask and s4u2proxy
- Managing replication conflicts for humans in 389
- Securing RHEL - CentOS - Fedora
- KRB5 setup for ldap server testing
- Debugging 389ds tests
- mod selinux on rhel7
- Ovirt with ldap authentication source
- Spamassasin with postfix
- SSH keys in ldap
- FreeIPA: Giving permissions to service accounts.
- OpenBSD relayd
- OpenBSD BGP and VRFs
- OpenBSD nat64
- Unit testing LDAP acis for fun and profit
- PPP on OpenBSD with Internode