Is Kanidm audited and used in prod? #2584
-
|
It seems like lovely product built on SQLite with Rust, Did Kanidm underwent any security audits? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
|
Yes - there are multiple organisations using it in production for their users day to day. Additionally, a number of the security critical parts and cryptographic elements have been audited by the SUSE product security team. They made a small number of hardening recommendations where were all applied, and they were otherwise impressed with the design and quality of the code. |
Beta Was this translation helpful? Give feedback.
-
|
Great to here!, some additional question then
|
Beta Was this translation helpful? Give feedback.
-
Yes, but that's a rather vague question as it stands. If you have a read through our documentation and can't find what you want, then I'd suggest specific questions are more easily answered.
Not as yet. Federation is planned in future. (No specific timeline)
Events are logged as part of the standard system operation, and we're improving their fidelity over time. See #2185 for discussions on that.
Yes. |
Beta Was this translation helpful? Give feedback.
Yes - there are multiple organisations using it in production for their users day to day.
Additionally, a number of the security critical parts and cryptographic elements have been audited by the SUSE product security team. They made a small number of hardening recommendations where were all applied, and they were otherwise impressed with the design and quality of the code.