Scripts

kanidm.sh

Execution Environment: kanidm server

• This script sets up kanidm for netbird's dashboard, and device auth

netbird-remote-login.sh

Execution Environment: Local Laptop/Desktop

This is a client-side wrapper that manages the lifecycle of a remote authentication session.

• Technical Logic:
  • Reverse SSH Tunneling: It establishes an SSH tunnel on port 53000 (NetBird's default PKCE callback port). This allows the OIDC "Success" signal from your laptop's browser to be sent back to the NetBird process running on the server.
  • Environment Spoofing: It executes the remote netbird up command with the DESKTOP_SESSION=1 variable, which tricks the CLI into thinking it is running on a GUI-enabled machine.
  • Interactive Terminal: Uses the -t flag to ensure the remote NetBird process can interactively print the login URL to your local screen.
• Usage: ./netbird-remote-login.sh user@remote-server-ip [management-url]

netbird-auth-helper.sh

Execution Environment: Remote Headless Server

This script is a discovery and command-generation tool. It automates the detection of the server's network configuration to simplify the login process.

• Technical Logic: It identifies the primary network interface by checking the system's default route. It then extracts the IP address from that interface and identifies the current active user.
• Usage: Run ./netbird-auth-helper.sh on the server.
• Output: It generates a one-line ssh command. You copy this command and paste it into the terminal of your local laptop. It handles all the complex flags required to bridge the two machines.

Configs

management-dex.conf

• This is for using netbird's internal oidc provider, which allows defining an upstream provider.

managment.json

• This is the current config that is running with kanidm.