Kanidm
Kanidm is a modern, simple and secure identity management platform written in Rust. It provides OAuth2/OIDC, LDAP, RADIUS and Unix (PAM/nsswitch) authentication, WebAuthn/passkey support and a self-service web portal for managing people, groups and service accounts.
Kanidm
In Development
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
Installation
Default install:
1
bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/DevScripts/main/ct/deferred/kanidm.sh)"
Notes
Kanidm needs a domain name, not a bare IP. Open https://kanidm.[IP].nip.io:8443 and accept the self-signed certificate.
To use your own domain, or if your DNS blocks nip.io, set domain and origin in /etc/kanidm/server.toml before creating accounts. Changing them later needs a domain rename.
Create the admin passwords inside the container with kanidmd recover-account idm_admin (signs in to the web portal) and kanidmd recover-account admin.