Selfhosted

39893 readers

358 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago

MODERATORS

[email protected]

Anybody here running AD on-prem in your homelab? (lemmy.world)

submitted 8 months ago by [email protected] to c/[email protected]

76 comments fedilink hide all child comments

I'm curious as to why someone would need to do that short of having a bunch of users and a small office at home. Or maybe managing the family's computers is easier that way?

I was considering a domain controller (biased towards linux since most servers/VMs are linux) but right now, for the homelab, it just seems like a shiny new toy to play with rather than something that can make life easier/more secure. There's also the problem of HA and being locked out of your computer if the DC is down.

Tell me why you're running it and the setup you've got that makes having a DC worth it.

Thanks!

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 8 months ago (2 children)

Not AD proper but a compatible controller Linux distro to tie the desktops to, plus common credentials across several services. Just simplifies things not having a dozen different logins.

[–] [email protected] 2 points 8 months ago (1 children)

What is that controller distro you use?

I used to use a Linux based AD replacement years ago but they turned that one into a pay model and if I'm going to pay for something I'll just use Windows Server

[–] [email protected] 1 points 8 months ago* (last edited 8 months ago)

https://www.univention.com/

It has all the needed parts plus an interesting plug in app ecosystem if you like that kind of thing. My only real gripe with it though is a pile of high sev vulnerabilities that are picked up by a scanning engine that haven't been fixed for a long time, so I'm reluctant to recommend it unless you have a solid security/segmentation setup in place.

[–] [email protected] 2 points 8 months ago* (last edited 8 months ago) (1 children)

Do you mean something like FreeIPA? Seems like a good way to maintain identity across services in the homelab.

[–] [email protected] 2 points 8 months ago* (last edited 8 months ago)

No, currently univention corporate server (UCS), but I'll give those a look since I've been eyeing a replacement for a while due to some long standing vulns that I'm keen to be rid of.