{"version":"https://jsonfeed.org/version/1.1","title":"Tech","home_page_url":"https://forgeone.solutions/en/tech","feed_url":"https://forgeone.solutions/en/feeds/blogs/tech/feed.json","description":"Technical guides from real engineering practice: installation, integration, automation, troubleshooting and production operation of modern Linux and open-source platforms. The articles connect concrete configuration with architecture, security, lifecycle, monitoring and operations.","language":"en","items":[{"id":"https://forgeone.solutions/en/tech/sles-16-hardening-openscap-cis-mlm","url":"https://forgeone.solutions/en/tech/sles-16-hardening-openscap-cis-mlm","title":"Hardening and auditing SLES 16: OpenSCAP, CIS context and SUSE Multi-Linux Manager","summary":"Practical SLES 16 guide with OpenSCAP, ANSSI high lab evidence, CIS Level 2 positioning and SUSE Multi-Linux Manager channel readiness.","content_text":"Practical SLES 16 guide with OpenSCAP, ANSSI high lab evidence, CIS Level 2 positioning and SUSE Multi-Linux Manager channel readiness.","date_published":"2026-10-06T08:00:00.000Z","date_modified":"2026-10-07T08:15:10.548Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/freeipa-sudo-rules-delegate-commands-without-root-passwords","url":"https://forgeone.solutions/en/tech/freeipa-sudo-rules-delegate-commands-without-root-passwords","title":"FreeIPA sudo rules in practice: delegate commands without root passwords","summary":"Practical guide for central FreeIPA sudo rules with user group, host group, command group, positive sudo test, negative checks and SSSD cache notes.","content_text":"Practical guide for central FreeIPA sudo rules with user group, host group, command group, positive sudo test, negative checks and SSSD cache notes.","date_published":"2026-10-04T05:00:00.000Z","date_modified":"2026-10-07T00:02:23.155Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-native-clients-after-keycloak-sso","url":"https://forgeone.solutions/en/tech/grommunio-native-clients-after-keycloak-sso","title":"grommunio native clients after Keycloak SSO: Thunderbird, Outlook, EWS, EAS and MFA explained","summary":"Practical acceptance guide for Thunderbird, AutoConfig, AutoDiscover, EWS, EAS, Outlook boundaries and MFA after upgrading to grommunio 2026.06.2.","content_text":"Practical acceptance guide for Thunderbird, AutoConfig, AutoDiscover, EWS, EAS, Outlook boundaries and MFA after upgrading to grommunio 2026.06.2.","date_published":"2026-10-03T05:00:00.000Z","date_modified":"2026-10-06T10:05:33.141Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-2026-06-2-upgrade-keycloak-sso-practice","url":"https://forgeone.solutions/en/tech/grommunio-2026-06-2-upgrade-keycloak-sso-practice","title":"grommunio 2026.06.2 Upgrade and Technical Acceptance: Keycloak SSO, MFA, AutoDiscover and Mail Flow","summary":"Practical guide: upgrade grommunio 2026.06.1 to 2026.06.2, handle Keycloak SSO, and accept the result with system, mail, discovery, MFA, browser and client checks.","content_text":"Practical guide: upgrade grommunio 2026.06.1 to 2026.06.2, handle Keycloak SSO, and accept the result with system, mail, discovery, MFA, browser and client checks.","date_published":"2026-10-02T08:00:00.000Z","date_modified":"2026-10-06T19:43:53.277Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/proxmox-ve-cephx-aes256k-rook-okd-migration","url":"https://forgeone.solutions/en/tech/proxmox-ve-cephx-aes256k-rook-okd-migration","title":"Proxmox VE: Migrating CephX from AES to AES256K with Rook/OKD","summary":"CephX key migration from AES to AES256K in Proxmox VE with external Rook/OKD, Ceph-CSI secrets and final cipher lockdown.","content_text":"CephX key migration from AES to AES256K in Proxmox VE with external Rook/OKD, Ceph-CSI secrets and final cipher lockdown.","date_published":"2026-09-27T19:05:06.287Z","date_modified":"2026-10-07T09:40:15.249Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/freeipa-hbac-ssh-access-user-group-host-practice","url":"https://forgeone.solutions/en/tech/freeipa-hbac-ssh-access-user-group-host-practice","title":"FreeIPA HBAC in Practice: Control SSH Access by User, Group and Host","summary":"Control SSH access by user group, host group and service and validate it with real SSH tests.","content_text":"Control SSH access by user group, host group and service and validate it with real SSH tests.","date_published":"2026-09-20T10:26:48.037Z","date_modified":"2026-10-06T18:40:23.715Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/freeipa-password-policies-expiration-lockout-practice","url":"https://forgeone.solutions/en/tech/freeipa-password-policies-expiration-lockout-practice","title":"FreeIPA Password Policies in Practice: Expiration, Lockout and Authentication Behavior","summary":"Global and group policies, expiration, history, lockout, unlock and Linux client behavior in the lab.","content_text":"Global and group policies, expiration, history, lockout, unlock and Linux client behavior in the lab.","date_published":"2026-09-19T23:15:34.706Z","date_modified":"2026-10-04T06:08:52.184Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/managing-freeipa-users-groups-identity-lifecycle-practice","url":"https://forgeone.solutions/en/tech/managing-freeipa-users-groups-identity-lifecycle-practice","title":"Managing FreeIPA Users and Groups: Identity Lifecycle in Practice","summary":"Identity lifecycle, stage users, preserved users, groups, member managers and client evidence in the lab.","content_text":"Identity lifecycle, stage users, preserved users, groups, member managers and client evidence in the lab.","date_published":"2026-09-19T21:53:10.853Z","date_modified":"2026-10-03T17:38:24.175Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/connect-linux-clients-freeipa-sssd-kerberos-centralized-users","url":"https://forgeone.solutions/en/tech/connect-linux-clients-freeipa-sssd-kerberos-centralized-users","title":"Connect Linux Clients to FreeIPA: SSSD, Kerberos and Centralized Users","summary":"SSSD, Kerberos, central users, SSH, cache and recovery in a practical FreeIPA client lab.","content_text":"SSSD, Kerberos, central users, SSH, cache and recovery in a practical FreeIPA client lab.","date_published":"2026-09-19T14:50:32.233Z","date_modified":"2026-10-06T18:40:38.902Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/operate-harden-suse-multi-linux-manager-5-2-production","url":"https://forgeone.solutions/en/tech/operate-harden-suse-multi-linux-manager-5-2-production","title":"Operate and harden SUSE Multi-Linux Manager 5.2 in production","summary":"Operate SUSE Multi-Linux Manager 5.2 long-term: backup, restore, TLS, roles, monitoring, storage, channel sync, maintenance windows and handover.","content_text":"Operate SUSE Multi-Linux Manager 5.2 long-term: backup, restore, TLS, roles, monitoring, storage, channel sync, maintenance windows and handover.","date_published":"2026-09-18T06:00:00.000Z","date_modified":"2026-10-04T13:06:46.338Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-reporting-inventory-subscription-audit","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-reporting-inventory-subscription-audit","title":"SUSE Multi-Linux Manager 5.2: build reporting, inventory and subscription audit","summary":"Reporting, inventory, CVE Audit and subscription matching in SUSE Multi-Linux Manager 5.2: turn managed systems into reliable operational information.","content_text":"Reporting, inventory, CVE Audit and subscription matching in SUSE Multi-Linux Manager 5.2: turn managed systems into reliable operational information.","date_published":"2026-09-17T06:00:00.000Z","date_modified":"2026-10-05T08:51:51.108Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-web-5-0-in-the-lab","url":"https://forgeone.solutions/en/tech/grommunio-web-5-0-in-the-lab","title":"grommunio Web 5.0 in the lab: settings namespace, shared mailboxes and admin impact","summary":"Technical deep dive into Web 5 with shared-mailbox automounts, grommunio/v1 settings and a strict acceptance matrix.","content_text":"Technical deep dive into Web 5 with shared-mailbox automounts, grommunio/v1 settings and a strict acceptance matrix.","date_published":"2026-09-16T22:34:02.001Z","date_modified":"2026-10-06T18:40:50.622Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-public-folder-functional-mailbox-multiple-domains","url":"https://forgeone.solutions/en/tech/grommunio-public-folder-functional-mailbox-multiple-domains","title":"grommunio: Replace Public Folders with a functional mailbox - step by step","summary":"Step-by-step guide with tested folder ACLs, grommunio Web automount, cross-domain permissions, Send-As, alias delivery and Thunderbird GUI evidence.","content_text":"Step-by-step guide with tested folder ACLs, grommunio Web automount, cross-domain permissions, Send-As, alias delivery and Thunderbird GUI evidence.","date_published":"2026-09-16T18:50:49.818Z","date_modified":"2026-10-06T21:02:02.331Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-ansible-next-to-salt","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-ansible-next-to-salt","title":"SUSE Multi-Linux Manager 5.2: use Ansible next to Salt in production","summary":"What SUSE Multi-Linux Manager 5.2 can do with Ansible: control nodes, inventories, playbooks, Compliance as Code and clear separation from Salt.","content_text":"What SUSE Multi-Linux Manager 5.2 can do with Ansible: control nodes, inventories, playbooks, Compliance as Code and clear separation from Salt.","date_published":"2026-09-16T06:00:00.000Z","date_modified":"2026-10-05T16:32:30.274Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-imap-migration-imapsync-2026-step-by-step","url":"https://forgeone.solutions/en/tech/grommunio-imap-migration-imapsync-2026-step-by-step","title":"Migrate IMAP mailboxes to grommunio with imapsync","date_published":"2026-09-15T20:30:00.000Z","date_modified":"2026-10-05T04:31:44.562Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-disaster-recovery-single-mailbox-restore-2026-step-by-step","url":"https://forgeone.solutions/en/tech/grommunio-disaster-recovery-single-mailbox-restore-2026-step-by-step","title":"grommunio 2026 disaster recovery and single mailbox restore: backup, full DR and targeted mailbox recovery in the lab","summary":"Part 11 of the grommunio 2026 series validates full DR and targeted mailbox restore in a real appliance lab.","content_text":"Part 11 of the grommunio 2026 series validates full DR and targeted mailbox restore in a real appliance lab.","date_published":"2026-09-15T20:19:01.975Z","date_modified":"2026-10-06T11:28:26.087Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-integrate-sso-keycloak-saml-mfa","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-integrate-sso-keycloak-saml-mfa","title":"SUSE Multi-Linux Manager 5.2: integrate SSO with Keycloak, SAML and MFA","summary":"Keycloak SAML SSO for SUSE Multi-Linux Manager: client, metadata, ACS, certificates, MFA, roles, break-glass and acceptance checks.","content_text":"Keycloak SAML SSO for SUSE Multi-Linux Manager: client, metadata, ACS, certificates, MFA, roles, break-glass and acceptance checks.","date_published":"2026-09-15T06:00:00.000Z","date_modified":"2026-10-03T18:13:04.148Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-build-proxies-for-sites","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-build-proxies-for-sites","title":"SUSE Multi-Linux Manager 5.2: build proxies for sites and distributed Linux estates","summary":"Practical guide for SUSE Multi-Linux Manager proxies: architecture, channels, proxy host, bootstrap, client assignment, reports and acceptance checks.","content_text":"Practical guide for SUSE Multi-Linux Manager proxies: architecture, channels, proxy host, bootstrap, client assignment, reports and acceptance checks.","date_published":"2026-09-14T06:00:00.000Z","date_modified":"2026-10-06T07:06:26.439Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-cluster-ha-2026-step-by-step","url":"https://forgeone.solutions/en/tech/grommunio-cluster-ha-2026-step-by-step","title":"grommunio 2026 Cluster and High Availability: from multi-server lab to tested active/standby homeserver","summary":"Part 10 shows grommunio HA with DRBD, Pacemaker, Corosync, STONITH, witness, VIP and an active/standby homeserver.","content_text":"Part 10 shows grommunio HA with DRBD, Pacemaker, Corosync, STONITH, witness, VIP and an active/standby homeserver.","date_published":"2026-09-13T14:00:00.000Z","date_modified":"2026-10-07T08:47:33.365Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-openscap-compliance-audit","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-openscap-compliance-audit","title":"SUSE Multi-Linux Manager 5.2: use OpenSCAP, compliance and audit in production","summary":"Use OpenSCAP with SUSE Multi-Linux Manager 5.2 in production: prepare clients, select profiles, schedule scans, review results and control remediation.","content_text":"Use OpenSCAP with SUSE Multi-Linux Manager 5.2 in production: prepare clients, select profiles, schedule scans, review results and control remediation.","date_published":"2026-09-13T06:00:00.000Z","date_modified":"2026-10-07T08:18:13.796Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/grommunio-multitenancy-2026-step-by-step","url":"https://forgeone.solutions/en/tech/grommunio-multitenancy-2026-step-by-step","title":"grommunio Multitenancy 2026: organizations, domains and multiple LDAP sources","summary":"Part 9 of the grommunio 2026 series classifies multitenancy realistically: organizations, domains, per-organization LDAP, admin boundaries, mail flow, GAL, calendar, MDM and MSP limits.","content_text":"Part 9 of the grommunio 2026 series classifies multitenancy realistically: organizations, domains, per-organization LDAP, admin boundaries, mail flow, GAL, calendar, MDM and MSP limits.","date_published":"2026-09-12T16:00:00.000Z","date_modified":"2026-10-06T18:41:15.274Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-manage-mixed-linux","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-manage-mixed-linux","title":"SUSE Multi-Linux Manager 5.2: manage mixed Linux estates in production","summary":"Operate heterogeneous Linux estates with SLES, SL Micro, Debian, Ubuntu, Rocky, Alma and Oracle Linux.","content_text":"Operate heterogeneous Linux estates with SLES, SL Micro, Debian, Ubuntu, Rocky, Alma and Oracle Linux.","date_published":"2026-09-12T06:00:00.000Z","date_modified":"2026-10-04T15:59:40.334Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-patch-lifecycle-management","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-patch-lifecycle-management","title":"SUSE Multi-Linux Manager 5.2: build production patch and lifecycle management","summary":"Relevant patches, staging, maintenance windows and CLM as a production update process.","content_text":"Relevant patches, staging, maintenance windows and CLM as a production update process.","date_published":"2026-09-11T06:00:00.000Z","date_modified":"2026-10-05T14:48:59.576Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-onboard-linux-clients","url":"https://forgeone.solutions/en/tech/suse-multi-linux-manager-5-2-onboard-linux-clients","title":"SUSE Multi-Linux Manager 5.2: onboard first Linux clients for production","summary":"Activation keys, bootstrap, Salt key and system list for the first managed SLES 16 client.","content_text":"Activation keys, bootstrap, Salt key and system list for the first managed SLES 16 client.","date_published":"2026-09-10T06:00:00.000Z","date_modified":"2026-10-06T05:39:19.305Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]},{"id":"https://forgeone.solutions/en/tech/install-suse-multi-linux-manager-5-2-sl-micro","url":"https://forgeone.solutions/en/tech/install-suse-multi-linux-manager-5-2-sl-micro","title":"Install SUSE Multi-Linux Manager 5.2 for production: SL Micro, storage and first channel sync","summary":"Practical guide for SUSE Multi-Linux Manager 5.2 on SL Micro 6.2: verify image, prepare appliance, configure storage, install with mgradm, connect SCC and sync the first channel.","content_text":"Practical guide for SUSE Multi-Linux Manager 5.2 on SL Micro 6.2: verify image, prepare appliance, configure storage, install with mgradm, connect SCC and sync the first channel.","date_published":"2026-09-09T06:00:00.000Z","date_modified":"2026-10-07T06:53:57.912Z","author":{"name":"Mathias Rumbold"},"authors":[{"name":"Mathias Rumbold"}]}]}