Last week we were working on using Entra ID (Azure active directory) as an Identity Provider (IdP) for a Keycloak instance. For reasons we chose to use a SAML based setup. While looking at mapping common Entra ID attributes to Keycloak attributes, it took some effort to find the exact …

On the list of things that should work on OpenBSD in my runbsd.eu project, e-mail is somewhere on the top. This is where the project helps to do stuff on OpenBSD. Because for normal use, I outsourced most of the e-mail server tasks to Soverin. And that works fine …

Just as a quick note to future self: To run Ivanti VPN on Debian, you need libwebkit2gtk-4.0, while Debian 13 moved to version 4.1. The Ivanti client will install, but fail to start the GUI:

systeemkabouter@vm:~$ /opt/pulsesecure/bin/pulseUI
/opt/pulsesecure/bin/pulseUI: error while loading …

Incomplete notes for running syncthing on OpenBSD

pkg_add syncthing

systctl settings

bash-5.3# echo "kern.maxfiles=80000" >> /etc/sysctl.conf
bash-5.3# sysctl kern.maxfiles=80000

login.conf for syncthing daemon

syncthing:\
        :openfiles-cur=64000:\
        :openfiles-max=64000:\
        :tc=daemon:

set daemonflags in /etc/rc.d/syncthing:

daemon_flags="-no-browser -gui-address=0.0 …

After installing the MacBook Pro with OpenBSD and enabling the virtualization software on it by enabling 'vmd', it took a couple of days to find some time to work on the #RUNBSD project.

Today I did get the macbook to do ethernet bridging, so the virtual machines that I will …