Life Amongst the Authentica-ceans 🦀
summary
Kanidm is a new open‑source IDM written in Rust that targets modern web APIs while keeping legacy hooks (LDAP read‑only gateway, PAM/NSS, RADIUS). It implements WebAuthn support (Touch ID, Windows Hello, YubiKeys), password bad‑listing with zxcvbn, a recycle bin, SSH key management and planned SSH CA issuance, plus concurrent data structures and a custom transactional cache. Early measurements show it already delivers ~40,000 searches/sec and ~4,000 authentications/sec on a 4‑core, 8GB SSD machine; project has 6 subprojects, 7 main contributors and 350+ commits.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:38Open Source Identity Management
- 7:37kennedym
- 9:38zfs
- 11:27sshcas
- 15:15unix integration
- 17:18ethics and rights
- 19:14conclusion
related talks
45mLife Amongst the Authentica-ceans 🦀
26mWho Authenticates Linux? Rethinking PAM & NSS in the Age of Cloud Identity
46mBuilding Full-Stack, Secure, and Scalable Applications Without the Infrastructure Headache
39mZen and the art of edge authentication
39mAuthN and AuthZ at Cruise: Crawl, Walk, Run
47mPasswords are so 1990
31mWeb Authentication - Imagine a World Without Passwords
45mOAuth and beyond: Modern auth not only for the web