Comments (4)
Static keys don't allow for rolling changes with Microsoft's public key.
It is important to note that these keys rollover on a periodic basis and, in an emergency, could be rolled over immediately. All applications that use Azure AD should be able to programmatically handle the key rollover process or establish a periodic manual rollover process.
As Microsoft states here, those applications that roll their own API interaction instead of using a supported azure library will have to be wary to update public keys.
As a security-critical application, we cannot afford to have a static key that needs updating.
We must be able to poll Microsoft's key repository to ensure our key is up-to-date. I used a node library to convert the jwk to a pem file that openssl could use for validation previously, but I'll have to do it in C code (
int jwk_to_pem_rsa(cJSON jwk){...}
) instead.
aadd
- Azure Active Directory Daemon?
Source: src/getkeys.c
See also: pam_ftp
, pam_mkhomedir
, pam_userdb
LDAP authentication using pam_ldap and nss_ldap
Simple example of daemon for Linux (GitHub)
from pam_aad.
from pam_aad.
https://github.com/openstack/keystone
from pam_aad.
https://github.com/CyberNinjas/pam_useradd
from pam_aad.
Related Issues (20)
- Error parsing debug flag in config file HOT 1
- Python Implementation
- Branding guidelines for applications
- Check for Group membership before sending an email
- Docker script failing in Travis
- Hardened Build System
- Secure Vulnerability Disclosure
- CII Best Practices Badge Program HOT 1
- Microsoft Authenticator for authentication
- Support for macOS HOT 1
- Push images to docker registry
- Update maintainer email address for Debian packages HOT 1
- Add a check to block certain users HOT 1
- Normalize input before comparing
- pam_aad.c:4:21: fatal error: sds/sds.h: No such file or directory HOT 5
- First login failed HOT 2
- Bintray EOL
- login issue
- is this still under maintenance ? HOT 3
- sds/sds.h: No such file or directory HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pam_aad.