You cant. You can only do your best to make it as secure as possible, but given enough time, someone can break it.

Basic tips:

• don’t run any services on their defaults ports
• don’t allow password auth for any exposed service. Ever.
• run intrusion detection (fail2ban for simple ssh / Crowdsec for something a little beefier)

For ssh specifically, lock down your sshd config, make sure only key-based auth is enabled, and maybe as an extra step, create a dedicated user, and jail it by only allowing it access for the commands you need to interact with.

If it helps with your outlook at all, fascist elements in our government (right-wing, naturally) have been trying and failing to do this shit since the end of WWII. It’s very cyclical, and this is the first real chance they’ve gotten a second try and whatever the flavor of the decade platform is. Red Scare parts I & II, Vietnam, Oil Crisis of the 70’s, and the Cold War of the 80’s, Satanic Panic, and skipping some all the way to the Tea Party bullshit.

Their entire mindset is just finding something that scares enough people to get elected, then shovel their attempt at moral superiority down everyone’s throats. That’s the platform. It takes hold for a few years then it fails, and the left side of things enjoys a few terms of progress. Trump floundering is a good thing. Trump failing again will push these assholes back into their caves for another decade.

They seriously still think they can glean some information. Russia’s psychotic leaders have a one track mind.

Again???

Didn’t think they’d bring this one back until they released their ‘Greatest Shits’ album.

It would serve a better public purpose to have him run away though. Hopefully finally break the idiotic brainwashing on some segment of his cult.

“I have zero evidence at all proving that anything happened at all in the 2020 election, but I can promise you all…If I’m elected in November, I will have somebody fabricate SO MUCH evidence, we will put everyone you hate in jail. That’s a promise. Let’s really take this fascist 'Us V. Them ’ bullshit to the next level! L8rSk8rs”

Uh oh: https://www.rgj.com/story/news/politics/elections/2024/09/06/nevada-supreme-court-rules-green-party-ineligible-for-general-election/75109795007/

You’re wrong again

Your local auth services are configured to use LDAP as a source, whatever your local auth mechanism is checks credentials, and then you’re auth’d or not. Some distros have easy to use interfaces to configure this, some don’t, but mostly it’s just configuring pam.d (for Linux), and a caching daemon of some sort to keep locally cached copies of the shadow info so you can auth when the LDAP server can’t be contacted (if you’ve previously authenticated once). You can set up many different authentication sources and backends as well, and set their preferences, restrictions, options…etc.

RHEL/Fedora examples: https://www.redhat.com/sysadmin/pam-authconfig

Debian examples: https://wiki.debian.org/LDAP/PAM

Then you don’t understand how it works with local auth services.

You didn’t read the article

I think you’re missing the point of LDAP then. It’s a centralized directory used for querying information. It’s not necessarily about user information, but can be anything.

What you’re asking for is akin to locally hosting a SQL server that other machines can talk to? Then it’s just a server. Start an LDAP server somewhere, then talk to it. That’s how it works.

If you don’t want a network service for this purpose, then don’t use LDAP. If you want a bunch of users to exist on many machines without having to manually create them, then use LDAP, or a system configuration tool that creates and keeps them all eventually consistent.

I’m okay with this.

Not the green party or communist not jobs necessarily, but the Pro-Putin, “Ukraine is Nazis”, warmongering types…yup.

I think they just mean he’s going to be shouting and borderline, if not outright, sexist and racist.

I’ve seen a lot of seriously obvious and unapologetic shilling for very out there positions around here. The further telltale sign is that when one popular poster starts getting regularly rebuffed and shutdown, backup arrives not long after to pollute a thread with their bullshit.

Guaranteed they are all over the Fediverse and probably hosting their own instances.

I remember this show. I also remember it having better features in it. This is still neat though.

Looks like this exists now: https://www.nightflightplus.com/

BOOM, got’er