Life Amongst the Authentica-ceans 🦀
summary
Overview of Kanidm: an open source IDM written in Rust with a REST‑first API, LDAP gateway and PAM/NSS modules, RADIUS support, and native WebAuthn support for Touch ID Windows Hello and YubiKey. Claims a transactional cache and query optimizer; benchmarks show ~32,000 searches/sec on 100k users and ~4,000 auths/sec on a 4‑core 8GB VM, comparable to 389 via the LDAP gateway. Features include password bad‑listing, recycle bin, UUID home dirs allowing seamless username changes, and ~340 commits since open sourcing.
AI-written summary · about
chapters (12)
- 0:00Introduction to speaker
- 1:23Evolution of IDM protocols
- 4:41Work at University of Adelaide
- 7:33Contributing to open source
- 9:40Naming and identity standards
- 14:45Challenges in legacy systems
- 20:15Modernizing identity management
- 22:35Introducing Cunning DM
- 26:57Security and device integration
- 29:46Ethical design and UX
- 33:53Community and project growth
- 36:15Q&A and closing remarks
related talks
21mLife Amongst the Authentica-ceans 🦀
26mWho Authenticates Linux? Rethinking PAM & NSS in the Age of Cloud Identity
39mAuthN and AuthZ at Cruise: Crawl, Walk, Run
24mSecurity benefits of FreeIPA/IDM
34mPasswordless: a story of risk, protection & excellent UX
47mPasswords are so 1990
46mBuilding Full-Stack, Secure, and Scalable Applications Without the Infrastructure Headache
31mWeb Authentication - Imagine a World Without Passwords