Andrey Krisanov

Andrey Krisanov

Synchronizing Users From LDAP With Keycloak Using AD Filters

Synchronizing Users From LDAP With Keycloak Using AD Filters

One of the ways to synchronize users via a third-party provider with Keycloak is a mechanism called User Federation. It allows, using Kerberos or LDAP protocol, to pull user entries from your corporate authentication storage. However, if your organization is big enough to have a complex structure and there are

Understand How Services Are Run And Operate In Production

Understand How Services Are Run And Operate In Production

Over the past few years, I've been interviewing dozens of software engineers who didn't know how their developed services run and operate in production. The reason for that is a rising trend in software engineering trusting in an infrastructure team, the magic of the cloud, Docker, Kubernetes, and whatnot. A

Choosing Apache Kafka For A New Project – A Questionnaire

Choosing Apache Kafka For A New Project – A Questionnaire

In any modern project where there is a need to process events – a set of messages or a stream of data – developers often propose Apache Kafka as the infrastructure solution. This is not always a weighted choice – where a classic broker like ActiveMQ will do, marketing sometimes prevails. But let's

My "It's not DNS" story

My "It's not DNS" story

Summer of 2019. I'm joining a large retail organisation that is undergoing a digital transformation. The role I've been hired for is a technical leadership role. The project I'm taking over doesn't even have a complete team yet, which means I'll be wearing all sorts of hats until I hire

Building Multi-Arch Images for Arm and x86

Building Multi-Arch Images for Arm and x86

At work, I am involved in the development of a machine learning SDK and cloud services for privacy and data protection. Like almost every company in this space, we rely heavily on Python's scientific ecosystem. Because it's quite mature and depends on native library development that started years ago, getting

Accidentally found a vulnerability in a crypto wallet and made $1,000

Accidentally found a vulnerability in a crypto wallet and made $1,000

In January 2022, I joined the community of one of the proof-of-stake blockchains. To play with what the protocol and its ecosystem offered, I created a wallet account on the official website https://wallet.****.org. Apart from general curiosity, I was interested in how they achieved security in a browser,