Thomas Darimont thomasdarimont

## upgrade_keycloak_database_settings.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                thomasdarimont
                / upgrade_keycloak_database_settings.md
            
            
              Created
              February 8, 2024 21:27
                — forked from dasniko/upgrade_keycloak_database_settings.md
            
              
                Upgrade Keycloak Database #settings
              
          
    Because of Arjuna timeout / closing the connection after 5 mins, setting following additional JAVA_OPTS might help:
-Dquarkus.transaction-manager.default-transaction-timeout=3600
-Dkeycloak.migration.batch-enabled=true
-Dkeycloak.migration.batch-size=1000


## haproxy-servers.cfg
# Edit this file then run `update-haproxy haproxy-servers.cfg`.
# Alternatively, use a shell pipeline to build server list `... | update-haproxy`.
server demo1 127.0.0.1:8001 check cookie demo1 weight 100
server demo2 127.0.0.1:8002 check cookie demo2 weight 100
server demo3 127.0.0.1:8003 check cookie demo3 weight 0
server demo4 127.0.0.1:8004 check cookie demo3 weight 0

## README-fail2ban-keycloak.md

      
              1 file
            
          
              1 fork
            
          
              0 comments
            
          
              0 stars
            
          
                thomasdarimont
                / README-fail2ban-keycloak.md
            
            
              Created
              May 18, 2021 08:03
                — forked from drmalex07/README-fail2ban-keycloak.md
            
              
                Use fail2ban to block brute-force attacks to keycloak server. #keycloak #fail2ban #brute-force-attack
              
          
    Add regular-expression filter under /etc/fail2ban/filter.d/keycloak.conf:
[INCLUDES]

before = common.conf

[Definition]

_threadName = [a-z][-_0-9a-z]*(\s[a-z][-_0-9a-z]*)*
_userId = (null|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})


## open-source-sso.md

      
              1 file
            
          
              1 fork
            
          
              0 comments
            
          
              2 stars
            
          
                thomasdarimont
                / open-source-sso.md
            
            
              Created
              April 15, 2020 06:02
                — forked from bmaupin/open-source-sso.md
            
              
                Comparison of open-source SSO implementations
              
          
    (Items in bold indicate possible concerns)


Keycloak
WSO2 Identity Server
Gluu
CAS
OpenAM
Shibboleth IdP
LemonLDAP::NG


OpenID Connect/OAuth support
yes
yes
yes
yes
yes
third-party
yes


Multi-factor authentication
yes
yes
yes
yes
yes
yes
yes


Admin UI
yes
yes
yes
yes
yes
no
yes


OpenJDK support
yes
yes
no³
yes
yes
**[partial](https://wiki.shibboleth.net/confluence/display/IDP30/SystemRequ


## RsyncOverSsh_Fast_Documentation.md

      
              2 files
            
          
              2 forks
            
          
              0 comments
            
          
              2 stars
            
          
                thomasdarimont
                / RsyncOverSsh_Fast_Documentation.md
            
            
              Created
              November 12, 2019 14:01
                — forked from KartikTalwar/Documentation.md
            
              
                Rsync over SSH - (40MB/s over 1GB NICs)
              
          
    The fastest remote directory rsync over ssh archival I can muster (40MB/s over 1gb NICs)

This creates an archive that does the following:

rsync
(Everyone seems to like -z, but it is much slower for me)

a: archive mode - rescursive, preserves owner, preserves permissions, preserves modification times, preserves group, copies symlinks as symlinks, preserves device files.
H: preserves hard-links
A: preserves ACLs


## gist:b7540bfb8771fa666b59a61426a205c2
Sub unprotected()
    If Hook Then
        MsgBox "VBA Project is unprotected!", vbInformation, "*****"
    End If
End Sub

## gist:056fc3100b5989e4ccd82a9d3abbac69
Option Explicit

Private Const PAGE_EXECUTE_READWRITE = &H40

Private Declare PtrSafe Sub MoveMemory Lib "kernel32" Alias "RtlMoveMemory" _
(Destination As LongPtr, Source As LongPtr, ByVal Length As LongPtr)

Private Declare PtrSafe Function VirtualProtect Lib "kernel32" (lpAddress As LongPtr, _
ByVal dwSize As LongPtr, ByVal flNewProtect As LongPtr, lpflOldProtect As LongPtr) As LongPtr

## kafka-productivity-hacks.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                thomasdarimont
                / kafka-productivity-hacks.md
            
            
              Created
              July 24, 2019 22:18
                — forked from MichaelDrogalis/apache-kafka-productivity-hacks.md
            
          
    I've been working with Kafka for over 7 years. I inevitably find myself doing the same set of activities while I'm developing or working with someone else's system. Here's a set of Kafka productivity hacks for doing a few things way faster than you're probably doing them now. 🔥

Show me all my Kafka topics and their partitions, replicas, and consumers
Show me the contents of a topic
Create a Kafka topic
Produce messages to a Kafka topic
Validate the schema of messages before producing to a topic
Do all of this at a distance

Get the tools


## webcryptoapi.html
<html>
<head>
  <script>
    function generateKey(alg, scope) {
      return new Promise(function(resolve) {
        var genkey = crypto.subtle.generateKey(alg, true, scope)
        genkey.then(function (pair) {
          resolve(pair)
        })
      })

## keycloak_impex.sh
#!/usr/bin/env bash

set -e
set -u
set -o pipefail

show_help() {
cat << EOF
Usage: $(basename "$0") <options>
    -h, --help       Display help
	# Edit this file then run `update-haproxy haproxy-servers.cfg`.
	# Alternatively, use a shell pipeline to build server list `... \| update-haproxy`.
	server demo1 127.0.0.1:8001 check cookie demo1 weight 100
	server demo2 127.0.0.1:8002 check cookie demo2 weight 100
	server demo3 127.0.0.1:8003 check cookie demo3 weight 0
	server demo4 127.0.0.1:8004 check cookie demo3 weight 0
	Keycloak	WSO2 Identity Server	Gluu	CAS	OpenAM	Shibboleth IdP	LemonLDAP::NG
OpenID Connect/OAuth support	yes	yes	yes	yes	yes	third-party	yes
Multi-factor authentication	yes	yes	yes	yes	yes	yes	yes
Admin UI	yes	yes	yes	yes	yes	no	yes
OpenJDK support	yes	yes	no³	yes	yes	**[partial](https://wiki.shibboleth.net/confluence/display/IDP30/SystemRequ
	Sub unprotected()
	If Hook Then
	MsgBox "VBA Project is unprotected!", vbInformation, "*****"
	End If
	End Sub
	Option Explicit

	Private Const PAGE_EXECUTE_READWRITE = &H40

	Private Declare PtrSafe Sub MoveMemory Lib "kernel32" Alias "RtlMoveMemory" _
	(Destination As LongPtr, Source As LongPtr, ByVal Length As LongPtr)

	Private Declare PtrSafe Function VirtualProtect Lib "kernel32" (lpAddress As LongPtr, _
	ByVal dwSize As LongPtr, ByVal flNewProtect As LongPtr, lpflOldProtect As LongPtr) As LongPtr
	<html>
	<head>
	<script>
	function generateKey(alg, scope) {
	return new Promise(function(resolve) {
	var genkey = crypto.subtle.generateKey(alg, true, scope)
	genkey.then(function (pair) {
	resolve(pair)
	})
	})
	#!/usr/bin/env bash

	set -e
	set -u
	set -o pipefail

	show_help() {
	cat << EOF
	Usage: $(basename "$0") <options>
	-h, --help Display help