[{"id":416,"title":"Microsoft Entra Connect Sync \u0130\u00e7in Kritik Uyar\u0131","content":"<p data-path-to-node=\"2\"><strong data-path-to-node=\"2\" data-index-in-node=\"0\">Microsoft Entra Connect Sync \u0130&ccedil;in Kritik Uyar\u0131: 30 Eyl&uuml;l 2026&rsquo;ya Kadar Y&uuml;kseltme Zorunlu!<\/strong><\/p>\n<p data-path-to-node=\"3\">Sistem y&ouml;neticilerinin ve BT ekiplerinin dikkatine: Microsoft Entra Connect Sync kullan\u0131yorsan\u0131z, takvimlerinize <strong data-path-to-node=\"3\" data-index-in-node=\"113\">30 Eyl&uuml;l 2026<\/strong> tarihini mutlaka kaydetmeniz gerekiyor. Bu tarihten itibaren, <strong data-path-to-node=\"3\" data-index-in-node=\"189\">2.5.79.0<\/strong> s&uuml;r&uuml;m&uuml;nden daha eski bir versiyon &ccedil;al\u0131\u015ft\u0131ran t&uuml;m senkronizasyon hizmetleri <strong data-path-to-node=\"3\" data-index-in-node=\"273\">&ccedil;al\u0131\u015fmay\u0131 tamamen durduracakt\u0131r<\/strong>.<\/p>\n<p data-path-to-node=\"4\">Microsoft, altyap\u0131s\u0131n\u0131 g&uuml;&ccedil;lendirmek ad\u0131na May\u0131s 2025&rsquo;te arka u&ccedil; hizmetlerinde kapsaml\u0131 bir de\u011fi\u015fikli\u011fe gitti ve bu yeni yap\u0131y\u0131 destekleyen 2.5.79.0 s&uuml;r&uuml;m&uuml;n&uuml; yay\u0131nlad\u0131. Olas\u0131 bir hizmet kesintisinin ve kimlik do\u011frulama sorunlar\u0131n\u0131n &ouml;n&uuml;ne ge&ccedil;mek i&ccedil;in ortam\u0131n\u0131z\u0131 bu tarihten &ouml;nce g&uuml;ncellemeniz \u015fart.<\/p>\n<h3 data-path-to-node=\"5\">Neden Y&uuml;kseltmelisiniz?<\/h3>\n<ul data-path-to-node=\"6\">\n<li>\n<p data-path-to-node=\"6,0,0\"><strong data-path-to-node=\"6,0,0\" data-index-in-node=\"0\">Servis Kesintisi Riski:<\/strong> Son tarihe kadar gerekli y&uuml;kseltmeyi yapmazsan\u0131z, senkronizasyon hizmetleriniz g&uuml;ncellenene kadar <strong data-path-to-node=\"6,0,0\" data-index-in-node=\"122\">BA\u015eARISIZ<\/strong> olacak ve \u015firket i&ccedil;i (on-premises) Active Directory ile bulut aras\u0131ndaki veri ak\u0131\u015f\u0131 duracakt\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"6,1,0\"><strong data-path-to-node=\"6,1,0\" data-index-in-node=\"0\">G&uuml;venlik ve \u0130deal S&uuml;r&uuml;m:<\/strong> Microsoft, yaln\u0131zca minimum gereksinim olan 2.5.79.0 s&uuml;r&uuml;m&uuml;ne ge&ccedil;mek yerine, en g&uuml;ncel g&uuml;venlik d&uuml;zeltmelerini i&ccedil;eren ve &ouml;nerilen <strong data-path-to-node=\"6,1,0\" data-index-in-node=\"155\">2.6.84.0<\/strong> s&uuml;r&uuml;m&uuml;ne y&uuml;kseltmenizi &ouml;nemle tavsiye eder.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"7\">Y&uuml;kseltme &Ouml;ncesi Dikkat Edilmesi Gerekenler<\/h3>\n<ol start=\"1\" data-path-to-node=\"8\">\n<li>\n<p data-path-to-node=\"8,0,0\"><strong data-path-to-node=\"8,0,0\" data-index-in-node=\"0\">Kurulum Dosyas\u0131:<\/strong> Microsoft Entra Connect Sync <code data-path-to-node=\"8,0,0\" data-index-in-node=\"46\">.msi<\/code> kurulum dosyas\u0131na yaln\u0131zca <strong data-path-to-node=\"8,0,0\" data-index-in-node=\"78\">Microsoft Entra Y&ouml;netim Merkezi (Entra Admin Center)<\/strong> &uuml;zerinden eri\u015febilirsiniz.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,1,0\"><strong data-path-to-node=\"8,1,0\" data-index-in-node=\"0\">Sistem Gereksinimleri:<\/strong> Sunucunuzun en az <strong data-path-to-node=\"8,1,0\" data-index-in-node=\"41\">.NET Framework 4.7.2<\/strong> ve <strong data-path-to-node=\"8,1,0\" data-index-in-node=\"65\">TLS 1.2<\/strong> protokol&uuml;n&uuml; destekledi\u011finden emin olun.<\/p>\n<\/li>\n<\/ol>\n<p data-path-to-node=\"9\">Kesinti ya\u015famamak ad\u0131na planlaman\u0131z\u0131 \u015fimdiden yapman\u0131z\u0131 ve sunucular\u0131n\u0131z\u0131 en g&uuml;ncel s&uuml;r&uuml;me y&uuml;kseltmenizi &ouml;neririz.<\/p>\n<p data-path-to-node=\"9\">Kaynak : <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/hybrid\/connect\/reference-connect-version-history\">https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/hybrid\/connect\/reference-connect-version-history<\/a><\/p>\n<p data-path-to-node=\"9\">&nbsp;<\/p>","excerpt":"Microsoft Entra Connect Sync \u0130\u00e7in Kritik Uyar\u0131: 30 Eyl\u00fcl 2026\u2019ya Kadar Y\u00fckseltme Zorunlu!\n\nSistem y\u00f6neticilerinin ve BT ekiplerinin dikkatine: Microsoft Entra Connect Sync kullan\u0131yorsan\u0131z, takvimlerinize 30 Eyl\u00fcl 2026 tarihini mutlaka kaydetmeniz gerekiyor. Bu tarihten itibaren, 2.5.79.0 s\u00fcr\u00fcm\u00fcnden daha eski bir versiyon \u00e7al\u0131\u015ft\u0131ran t\u00fcm senkronizasyon hizmetleri \u00e7al\u0131\u015fmay\u0131 tamamen durduracakt\u0131r.","created_at":"2026-09-01 17:26:44","updated_at":"2026-09-23 19:13:06","category_id":6,"view_count":50,"reading_time":2,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-09-01 14:26:44","featured_image":"\/uploads\/images\/2026\/09\/6a96e08fbea34_1788272783.jpg","slug":"microsoft-entra-connect-sync-icin-kritik-uyari","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":415,"title":" Active Directory FSMO Rolleri ","content":"<div id=\"model-response-message-contentr_cf7d70797b36fbc3\" class=\"markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger\" dir=\"ltr\" aria-busy=\"false\" aria-live=\"polite\">\n<div>Karma\u015f\u0131k bir sistemin kesintisiz i\u015flemesini sa\u011flayan \u015fey sadece kablolar, kod sat\u0131rlar\u0131 veya sunucu makineleri midir? Yoksa g&ouml;r&uuml;nmeyen ama her an i\u015fleyen g&ouml;rev da\u011f\u0131l\u0131mlar\u0131, sorumluluklar ve uyum mu?<\/div>\n<br>\n<div>Bili\u015fim d&uuml;nyas\u0131nda <strong data-path-to-node=\"4\" data-index-in-node=\"19\">Active Directory (AD)<\/strong>, devasa bir organizasyonun dijital omurgas\u0131n\u0131 olu\u015fturur. Bu omurgan\u0131n dengede kalmas\u0131n\u0131 sa\u011flayan, arka planda sessizce ama hayati g&ouml;revler &uuml;stlenen &ouml;zel yap\u0131lara ise <strong data-path-to-node=\"4\" data-index-in-node=\"207\">FSMO (Flexible Single Master Operation) Rolleri<\/strong> diyoruz.<\/div>\n<br>\n<div>\u0130lk bak\u0131\u015fta so\u011fuk ve teknik g&ouml;r&uuml;nen bu roller, asl\u0131nda insan topluluklar\u0131n\u0131n ve sosyal hayat\u0131n i\u015fleyi\u015f bi&ccedil;imiyle inan\u0131lmaz bir benzerlik ta\u015f\u0131r. Gelip birlikte bakal\u0131m: Sistemlerimizdeki bu gizli kahramanlar, insan ili\u015fkilerinde ve organizasyonlarda neye kar\u015f\u0131l\u0131k geliyor?<\/div>\n<br>\n<h3 data-path-to-node=\"7\">1. Forest Seviyesi Roller: Toplulu\u011fun Anayasas\u0131 ve S\u0131n\u0131rlar\u0131<\/h3>\n<div>T&uuml;m yap\u0131y\u0131 kapsayan, en geni\u015f &ccedil;aptaki kurallar\u0131 ve b&uuml;t&uuml;nl&uuml;\u011f&uuml; koruyan rollerdir.<\/div>\n<br>\n<ul data-path-to-node=\"9\">\n<li>\n<div><strong data-path-to-node=\"9,0,0\" data-index-in-node=\"0\">Schema Master (\u015eema Y&ouml;neticisi):<\/strong><\/div>\n<br>\n<ul data-path-to-node=\"9,0,1\">\n<li>\n<div><em data-path-to-node=\"9,0,1,0,0\" data-index-in-node=\"0\">Teknik Rol:<\/em> \u015eema de\u011fi\u015fikliklerini y&ouml;netir, sisteme d&acirc;hil edilecek yeni nesnelerin kurallar\u0131n\u0131 belirler (&Ouml;rn: Exchange Server kurulumu).<\/div>\n<\/li>\n<li>\n<div><em data-path-to-node=\"9,0,1,1,0\" data-index-in-node=\"0\">H&uuml;manist Kar\u015f\u0131l\u0131\u011f\u0131:<\/em> <strong data-path-to-node=\"9,0,1,1,0\" data-index-in-node=\"20\">Toplulu\u011fun Anayasas\u0131 ve \u0130lkeleri.<\/strong> Bir toplumda veya ailede temel de\u011ferlerin nas\u0131l tan\u0131mland\u0131\u011f\u0131n\u0131 belirleyen rehber zihindir. Kendi kimli\u011fimizi bozmadan yeniliklere nas\u0131l adapte olaca\u011f\u0131m\u0131z\u0131n mimar\u0131d\u0131r.<\/div>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<div><strong data-path-to-node=\"9,1,0\" data-index-in-node=\"0\">Domain Naming Master (Domain \u0130simlendirme Y&ouml;neticisi):<\/strong><\/div>\n<br>\n<ul data-path-to-node=\"9,1,1\">\n<li>\n<div><em data-path-to-node=\"9,1,1,0,0\" data-index-in-node=\"0\">Teknik Rol:<\/em> Yeni alan adlar\u0131n\u0131n (Domain ve Tree) eklenmesini veya kald\u0131r\u0131lmas\u0131n\u0131 denetler.<\/div>\n<\/li>\n<li>\n<div><em data-path-to-node=\"9,1,1,1,0\" data-index-in-node=\"0\">H&uuml;manist Kar\u015f\u0131l\u0131\u011f\u0131:<\/em> <strong data-path-to-node=\"9,1,1,1,0\" data-index-in-node=\"20\">Aaidiyet ve S\u0131n\u0131r Koyuclar.<\/strong> Kimin bu ekibin, ailenin veya toplulu\u011fun bir par&ccedil;as\u0131 oldu\u011funu; yeni kat\u0131l\u0131mlar\u0131n hangi \u015fartlarda ger&ccedil;ekle\u015fece\u011fini belirleyen kapsay\u0131c\u0131 iradedir.<\/div>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"11\">2. Domain Seviyesi Roller: G&uuml;nl&uuml;k Hayat\u0131n ve \u0130leti\u015fimin Temelleri<\/h3>\n<div>Daha yerel, g&uuml;nl&uuml;k ak\u0131\u015f\u0131 d&uuml;zenleyen ve bireysel etkile\u015fimleri y&ouml;neten rollerdir.<\/div>\n<br>\n<ul data-path-to-node=\"13\">\n<li>\n<div><strong data-path-to-node=\"13,0,0\" data-index-in-node=\"0\">RID Master (Relative ID Y&ouml;neticisi):<\/strong><\/div>\n<br>\n<ul data-path-to-node=\"13,0,1\">\n<li>\n<div><em data-path-to-node=\"13,0,1,0,0\" data-index-in-node=\"0\">Teknik Rol:<\/em> Yeni kimlikler (SID) olu\u015fturmak i&ccedil;in benzersiz havuzlar da\u011f\u0131t\u0131r.<\/div>\n<\/li>\n<li>\n<div><em data-path-to-node=\"13,0,1,1,0\" data-index-in-node=\"0\">H&uuml;manist Kar\u015f\u0131l\u0131\u011f\u0131:<\/em> <strong data-path-to-node=\"13,0,1,1,0\" data-index-in-node=\"20\">&Ouml;zg&uuml;nl&uuml;k ve Bireysellik.<\/strong> Her bireye kendi e\u015fsiz kimli\u011fini kazand\u0131ran, kimsenin bir ba\u015fkas\u0131n\u0131n g&ouml;lgesinde kalmamas\u0131n\u0131 sa\u011flayan adalet mekanizmas\u0131d\u0131r. Her birimizin benzersiz bir de\u011fer oldu\u011funu hat\u0131rlat\u0131r.<\/div>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<div><strong data-path-to-node=\"13,1,0\" data-index-in-node=\"0\">PDC Emulator (Primary Domain Controller):<\/strong><\/div>\n<br>\n<ul data-path-to-node=\"13,1,1\">\n<li>\n<div><em data-path-to-node=\"13,1,1,0,0\" data-index-in-node=\"0\">Teknik Rol:<\/em> Parola de\u011fi\u015fiklikleri, zaman (saat) senkronizasyonu ve GPO (Grup Politikalar\u0131) i\u015flemlerini y&uuml;r&uuml;t&uuml;r.<\/div>\n<\/li>\n<li>\n<div><em data-path-to-node=\"13,1,1,1,0\" data-index-in-node=\"0\">H&uuml;manist Kar\u015f\u0131l\u0131\u011f\u0131:<\/em> <strong data-path-to-node=\"13,1,1,1,0\" data-index-in-node=\"20\">Zaman\u0131n ve G&uuml;venin Ritmi.<\/strong> \u015eifrelerimiz g&uuml;venimizi, zaman senkronizasyonu ise ortak ritmimizi temsil eder. Bir grupta herkesin ayn\u0131 saate bakmas\u0131n\u0131, g&uuml;venin taze kalmas\u0131n\u0131 ve ortak hareket edilmesini sa\u011flayan liderlik enerjisidir.<\/div>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<div><strong data-path-to-node=\"13,2,0\" data-index-in-node=\"0\">Infrastructure Master (Altyap\u0131 Y&ouml;neticisi):<\/strong><\/div>\n<br>\n<ul data-path-to-node=\"13,2,1\">\n<li>\n<div><em data-path-to-node=\"13,2,1,0,0\" data-index-in-node=\"0\">Teknik Rol:<\/em> Farkl\u0131 domainler aras\u0131ndaki nesne referanslar\u0131n\u0131 g&uuml;nceller.<\/div>\n<\/li>\n<li>\n<div><em data-path-to-node=\"13,2,1,1,0\" data-index-in-node=\"0\">H&uuml;manist Kar\u015f\u0131l\u0131\u011f\u0131:<\/em> <strong data-path-to-node=\"13,2,1,1,0\" data-index-in-node=\"20\">K&ouml;rpr&uuml; Kurucular ve \u0130leti\u015fimciler.<\/strong> Farkl\u0131 gruplar, birimler veya k&uuml;lt&uuml;rler aras\u0131ndaki ba\u011flar\u0131 canl\u0131 tutan, bilgi ak\u0131\u015f\u0131n\u0131 sa\u011flayan ve kopukluklar\u0131 gideren \"halkla ili\u015fkiler\" ruhudur.<\/div>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"15\">Sahada En B&uuml;y&uuml;k Hata: \u0130nsanlar\u0131 ve Rolleri G&ouml;rmezden Gelmek<\/h3>\n<div>G&ouml;rselde teknik d&uuml;nya i&ccedil;in alt\u0131 &ccedil;izilen <strong data-path-to-node=\"16\" data-index-in-node=\"40\">\"Sahada En B&uuml;y&uuml;k Hatalar\"<\/strong>, asl\u0131nda insan odakl\u0131 y&ouml;netimde de tam olarak kar\u015f\u0131m\u0131za &ccedil;\u0131kan ac\u0131 tecr&uuml;belerdir:<\/div>\n<br>\n<ol start=\"1\" data-path-to-node=\"17\">\n<li>\n<div><strong data-path-to-node=\"17,0,0\" data-index-in-node=\"0\">Rollerin nerede\/kimde oldu\u011funu bilmemek:<\/strong> Bir ekipte kimin hangi sorumlulu\u011fu &uuml;stlendi\u011fini bilmemek, kriz an\u0131nda kaos yarat\u0131r.<\/div>\n<\/li>\n<li>\n<div><strong data-path-to-node=\"17,1,0\" data-index-in-node=\"0\">PDC Emulator'\u0131 (G&uuml;ven ve Zaman Merkezini) yedeklememek:<\/strong> G&uuml;veni ve ileti\u015fimi tek bir noktaya ba\u011f\u0131ml\u0131 k\u0131l\u0131p korumazsan\u0131z, o nokta &ccedil;&ouml;kt&uuml;\u011f&uuml;nde t&uuml;m yap\u0131 durur.<\/div>\n<\/li>\n<li>\n<div><strong data-path-to-node=\"17,2,0\" data-index-in-node=\"0\">De\u011fi\u015fim an\u0131nda rolleri ta\u015f\u0131mamak:<\/strong> Bir &ccedil;al\u0131\u015fan veya lider ayr\u0131l\u0131rken sorumluluklar\u0131 devretmezseniz, sistem i\u015flevsiz kal\u0131r.<\/div>\n<\/li>\n<li>\n<div><strong data-path-to-node=\"17,3,0\" data-index-in-node=\"0\">Zaman senkronizasyonunu yanl\u0131\u015f yap\u0131land\u0131rmak:<\/strong> Ekip &uuml;yelerinin farkl\u0131 ritimlerde ve farkl\u0131 beklentilerde &ccedil;al\u0131\u015fmas\u0131, senkronizasyon kayb\u0131na ve anla\u015fmazl\u0131klara yol a&ccedil;ar.<\/div>\n<\/li>\n<\/ol>\n<h3 data-path-to-node=\"19\">Ger&ccedil;ek M&uuml;hendislik (ve Ger&ccedil;ek \u0130nsanl\u0131k) Burada Ba\u015flar<\/h3>\n<div>G&ouml;rselin alt k\u0131sm\u0131ndaki mesaj &ccedil;ok net:<\/div>\n<br>\n<blockquote data-path-to-node=\"21\">\n<div><em data-path-to-node=\"21,0\" data-index-in-node=\"0\">\"Ger&ccedil;ek m&uuml;hendislik burada ba\u015flar: Domain Controller kurmak de\u011fil, hangi sunucunun hangi kritik g&ouml;revi &uuml;stlendi\u011fini bilmektir.\"<\/em><\/div>\n<\/blockquote>\n<div>Bunu sistem m&uuml;hendisli\u011finden al\u0131p insan ili\u015fkilerine uyarlad\u0131\u011f\u0131m\u0131zda kar\u015f\u0131m\u0131za \u015fu hakikat &ccedil;\u0131kar:<\/div>\n<br>\n<div><strong data-path-to-node=\"23\" data-index-in-node=\"0\">Ger&ccedil;ek liderlik ve ya\u015fam bilgeli\u011fi; sadece binalar kurmak veya ekipler olu\u015fturmak de\u011fil, o sistemin i&ccedil;indeki her bir bireyin hangi benzersiz g&ouml;revi ve de\u011feri &uuml;stlendi\u011fini anlamakt\u0131r.<\/strong><\/div>\n<br>\n<div>Sistemlerinizi d&uuml;zenli kontrol edin, sa\u011fl\u0131k taramalar\u0131n\u0131 aksatmay\u0131n ve en &ouml;nemlisi; o sistemleri ayakta tutan rollerin ve insanlar\u0131n de\u011ferini belgeleyip koruyun. &Ccedil;&uuml;nk&uuml; ister bir sunucu odas\u0131 olsun ister bir toplum; d&uuml;zen, sorumluluklar\u0131n fark\u0131nda olmakla ba\u015flar.<\/div>\n<\/div>","excerpt":"Sunuculardan \u0130nsanlara: FSMO Rolleri ve Hayat\u0131n Gizli Denge Merkezleri","created_at":"2026-08-25 17:53:02","updated_at":"2026-09-23 17:38:45","category_id":6,"view_count":96,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-08-25 14:53:02","featured_image":"\/uploads\/images\/2026\/08\/6a8dac49f2cf8_1787669577.jpeg","slug":"active-directory-fsmo-rolleri","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":412,"title":"A\u00e7\u0131k Kaynak Ara\u00e7larla Kurumsal PAM ","content":"<div id=\"model-response-message-contentr_7d2217de3cb53adf\" class=\"markdown markdown-main-panel enable-luminous-fast-follows enable-updated-hr-color md-content stronger\" dir=\"ltr\" aria-busy=\"false\" aria-live=\"polite\">\n<h1 data-path-to-node=\"0\">Apache Guacamole ve Teleport Hibrit Yakla\u015f\u0131m\u0131<\/h1>\n<p data-path-to-node=\"1\">Ayr\u0131cal\u0131kl\u0131 Eri\u015fim Y&ouml;netimi (Privileged Access Management - PAM), modern BT altyap\u0131lar\u0131nda g&uuml;venlik ve uyumlulu\u011fun temel ta\u015flar\u0131ndan biridir. Kurumsal tarafta <strong data-path-to-node=\"1\" data-index-in-node=\"159\">CyberArk<\/strong> gibi end&uuml;stri standard\u0131 &ccedil;&ouml;z&uuml;mler devasa bir g&uuml;venlik ekosistemi sunsa da y&uuml;ksek lisans maliyetleri ve karma\u015f\u0131k altyap\u0131 gereksinimleri, bir&ccedil;ok ekibi a&ccedil;\u0131k kaynak alternatiflere y&ouml;nlendiriyor.<\/p>\n<p data-path-to-node=\"2\">Peki, CyberArk benzeri kapsaml\u0131 bir PAM mimarisini a&ccedil;\u0131k kaynak ara&ccedil;larla birebir sim&uuml;le etmek m&uuml;mk&uuml;n m&uuml;?<\/p>\n<p data-path-to-node=\"3\">Yan\u0131t: <strong data-path-to-node=\"3\" data-index-in-node=\"7\">Evet.<\/strong> Tek bir ara&ccedil; t&uuml;m ihtiya&ccedil;lar\u0131 kar\u015f\u0131lamakta zorlansa da <strong data-path-to-node=\"3\" data-index-in-node=\"67\">Apache Guacamole<\/strong> ve <strong data-path-to-node=\"3\" data-index-in-node=\"87\">Teleport<\/strong>&rsquo;u bir araya getiren hibrit bir mimari kurarak enterprise seviyede bir PAM ortam\u0131 elde edebilirsiniz.<\/p>\n<h2 data-path-to-node=\"5\">Neden Hibrit Yakla\u015f\u0131m?<\/h2>\n<p data-path-to-node=\"6\">A&ccedil;\u0131k kaynak PAM projelerinde genelde iki ana k\u0131s\u0131tlama ile kar\u015f\u0131la\u015f\u0131l\u0131r:<\/p>\n<ol start=\"1\" data-path-to-node=\"7\">\n<li>\n<p data-path-to-node=\"7,0,0\"><strong data-path-to-node=\"7,0,0\" data-index-in-node=\"0\">Teleport Community<\/strong> s&uuml;r&uuml;m&uuml;n&uuml;n geli\u015fmi\u015f grafik aray&uuml;z\/RDP video kayd\u0131 konusundaki k\u0131s\u0131tlar\u0131 ve kurumsal SSO (SAML\/OIDC) s\u0131n\u0131rlar\u0131.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"7,1,0\"><strong data-path-to-node=\"7,1,0\" data-index-in-node=\"0\">Apache Guacamole<\/strong>&rsquo;un taray\u0131c\u0131 tabanl\u0131 RDP\/VNC taraf\u0131ndaki g&uuml;c&uuml;ne kar\u015f\u0131n, komut sat\u0131r\u0131 (CLI) ve terminal s&uuml;re&ccedil;lerinde DevOps ekipleri i&ccedil;in hantal kalmas\u0131.<\/p>\n<\/li>\n<\/ol>\n<p data-path-to-node=\"8\">Bu iki arac\u0131 birlikte kullanmak, birinin eksikli\u011fini di\u011ferinin g&uuml;c&uuml;yle kapatarak kusursuz bir denge yarat\u0131r.<\/p>\n<h2 data-path-to-node=\"10\">Rol Da\u011f\u0131l\u0131m\u0131: CyberArk vs. Guacamole + Teleport<\/h2>\n<p data-path-to-node=\"11\">A\u015fa\u011f\u0131daki tablo, CyberArk bile\u015fenlerinin hibrit a&ccedil;\u0131k kaynak mimarimizdeki kar\u015f\u0131l\u0131klar\u0131n\u0131 ve bu ara&ccedil;lar\u0131n se&ccedil;ilme nedenlerini &ouml;zetlemektedir:<\/p>\n<table data-path-to-node=\"12\">\n<thead>\n<tr>\n<td><strong>CyberArk Bile\u015feni<\/strong><\/td>\n<td><strong>Hangi Ara&ccedil; &Uuml;stlenir?<\/strong><\/td>\n<td><strong>Neden Bu Ara&ccedil;?<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><span data-path-to-node=\"12,1,0,0\"><strong data-path-to-node=\"12,1,0,0\" data-index-in-node=\"0\">PVWA + PSM<\/strong> <em data-path-to-node=\"12,1,0,0\" data-index-in-node=\"11\">(Windows \/ RDP &amp; Web)<\/em><\/span><\/td>\n<td><span data-path-to-node=\"12,1,1,0\"><strong data-path-to-node=\"12,1,1,0\" data-index-in-node=\"0\">Apache Guacamole<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"12,1,2,0\">Taray\u0131c\u0131 &uuml;zerinden istemcisiz (clientless) RDP eri\u015fimi ve <strong data-path-to-node=\"12,1,2,0\" data-index-in-node=\"58\">&uuml;cretsiz video oturum kayd\u0131 (Session Recording)<\/strong> i&ccedil;in idealdir.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"12,2,0,0\"><strong data-path-to-node=\"12,2,0,0\" data-index-in-node=\"0\">PSMP<\/strong> <em data-path-to-node=\"12,2,0,0\" data-index-in-node=\"5\">(Panelsiz \/ Do\u011frudan SSH)<\/em><\/span><\/td>\n<td><span data-path-to-node=\"12,2,1,0\"><strong data-path-to-node=\"12,2,1,0\" data-index-in-node=\"0\">Teleport<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"12,2,2,0\">Terminal &uuml;zerinden do\u011frudan SSH\/SFTP t&uuml;nelleme, k\u0131sa &ouml;m&uuml;rl&uuml; CA sertifika y&ouml;netimi ve metin tabanl\u0131 komut kayd\u0131nda standartt\u0131r.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"12,3,0,0\"><strong data-path-to-node=\"12,3,0,0\" data-index-in-node=\"0\">CPM + Vault<\/strong> <em data-path-to-node=\"12,3,0,0\" data-index-in-node=\"12\">(Kasa &amp; \u015eifre Rotasyonu)<\/em><\/span><\/td>\n<td><span data-path-to-node=\"12,3,1,0\"><strong data-path-to-node=\"12,3,1,0\" data-index-in-node=\"0\">Teleport + HashiCorp Vault<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"12,3,2,0\">Teleport sabit \u015fifre saklamak yerine sertifika tabanl\u0131 \u015fifresiz eri\u015fim sunar. \u015eifre rotasyonu ve hassas veri depolama i&ccedil;in arka plana <strong data-path-to-node=\"12,3,2,0\" data-index-in-node=\"134\">HashiCorp Vault<\/strong> veya <strong data-path-to-node=\"12,3,2,0\" data-index-in-node=\"155\">Vaultwarden<\/strong> eklenebilir.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2 data-path-to-node=\"14\">Mimarinin &Ccedil;al\u0131\u015fma Mant\u0131\u011f\u0131<\/h2>\n<p data-path-to-node=\"15\">Sisteminizin merkezinde, kullan\u0131c\u0131lar\u0131n eri\u015fim tipine g&ouml;re ayr\u0131lan iki ana giri\u015f kap\u0131s\u0131 yer al\u0131r:<\/p>\n<!----><!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c2033489812-34 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwjD0vyD6vmVAxUAAAAAHQAAAAAQtQI\"><!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c2033489812-34\">\n<div class=\"animated-opacity ng-tns-c2033489812-34\">\n<div class=\"code-block-decoration header-formatted gds-emphasized-body-m ng-tns-c2033489812-34 ng-star-inserted\"><span class=\"ng-tns-c2033489812-34\">Plaintext<\/span>\n<div class=\"buttons ng-tns-c2033489812-34 ng-star-inserted\"><!----><!----><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-badge mat-unthemed mat-badge-overlap mat-badge-above mat-badge-after mat-badge-small mat-badge-hidden ng-star-inserted\" aria-label=\"Kodu indir\"><!----><!----><!----><!----><\/button><!----><!----><!----><!----><!----><!----><!----><!----><!----><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-badge mat-unthemed mat-badge-overlap mat-badge-above mat-badge-after mat-badge-small mat-badge-hidden ng-star-inserted\" aria-label=\"Kodu kopyala\"><!----><!----><!----><!----><\/button><!----><!----><!----><!----><!----><!----><\/div>\n<!----><!----><\/div>\n<!---->\n<pre class=\"ng-tns-c2033489812-34\"><code class=\"code-container formatted ng-tns-c2033489812-34\" role=\"text\" data-test-id=\"code-content\">                               \u250c\u2500\u2500\u2500&gt; [ Guacamole ] \u2500\u2500\u2500&gt; Windows RDP &amp; Web Apps\n[ Kullan\u0131c\u0131lar ] \u2500\u2500(HTTPS\/SSH)\u2500\u2524       (Video Kayd\u0131 \/ Browser-based)\n                               \u2502\n                               \u2514\u2500\u2500\u2500&gt; [ Teleport ]  \u2500\u2500\u2500&gt; Linux SSH, K8s &amp; DBs\n                                       (Sertifikal\u0131 \/ CLI &amp; Terminal)\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!---->\n<h3 data-path-to-node=\"17\">1. Windows ve Grafik Aray&uuml;zler (Guacamole Katman\u0131)<\/h3>\n<ul data-path-to-node=\"18\">\n<li>\n<p data-path-to-node=\"18,0,0\"><strong data-path-to-node=\"18,0,0\" data-index-in-node=\"0\">Kullan\u0131m Amac\u0131:<\/strong> Sistem y&ouml;neticileri ve d\u0131\u015f tedarik&ccedil;ilerin (Vendors) Windows sunuculara RDP ile ba\u011flanmas\u0131.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"18,1,0\"><strong data-path-to-node=\"18,1,0\" data-index-in-node=\"0\">&Ouml;ne &Ccedil;\u0131kan Avantaj\u0131:<\/strong> \u0130stemci taraf\u0131na herhangi bir yaz\u0131l\u0131m veya VPN kurulumu gerektirmez. Arka planda &ccedil;al\u0131\u015fan <code data-path-to-node=\"18,1,0\" data-index-in-node=\"109\">guacd<\/code> servisi, t&uuml;m RDP oturumunu video format\u0131nda kay\u0131t alt\u0131na al\u0131r. Kullan\u0131c\u0131lar hedef sistemlerin \u015fifrelerini hi&ccedil;bir zaman g&ouml;rmez.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"19\">2. Linux, Kubernetes ve Veritabanlar\u0131 (Teleport Katman\u0131)<\/h3>\n<ul data-path-to-node=\"20\">\n<li>\n<p data-path-to-node=\"20,0,0\"><strong data-path-to-node=\"20,0,0\" data-index-in-node=\"0\">Kullan\u0131m Amac\u0131:<\/strong> DevOps ve altyap\u0131 ekiplerinin do\u011frudan kendi terminallerinden (<code data-path-to-node=\"20,0,0\" data-index-in-node=\"79\">tsh ssh user@server<\/code>) veya Teleport Web UI &uuml;zerinden Linux\/K8s ortamlar\u0131na eri\u015fimi.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"20,1,0\"><strong data-path-to-node=\"20,1,0\" data-index-in-node=\"0\">&Ouml;ne &Ccedil;\u0131kan Avantaj\u0131:<\/strong> Statik SSH anahtarlar\u0131 yerini <strong data-path-to-node=\"20,1,0\" data-index-in-node=\"50\">1-8 saatlik ge&ccedil;ici sertifikalara<\/strong> b\u0131rak\u0131r. Terminal &uuml;zerinde &ccedil;al\u0131\u015ft\u0131r\u0131lan her komut metin format\u0131nda index'lenir, aranabilir ve denetlenebilir hale gelir.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"22\">Teleport Community S&uuml;r&uuml;m&uuml;nde SSO K\u0131s\u0131tlamas\u0131n\u0131 A\u015fmak<\/h2>\n<p data-path-to-node=\"23\">Teleport&rsquo;un &uuml;cretsiz topluluk s&uuml;r&uuml;m&uuml;nde Azure AD (Entra ID) veya Okta gibi SAML\/OIDC entegrasyonlar\u0131 k\u0131s\u0131tl\u0131d\u0131r (yerel kullan\u0131c\u0131 veya GitHub OAuth desteklenir).<\/p>\n<p data-path-to-node=\"24\">Bu k\u0131s\u0131tlamay\u0131 mimarimizde \u015fu ad\u0131mlarla a\u015fabiliriz:<\/p>\n<ul data-path-to-node=\"25\">\n<li>\n<p data-path-to-node=\"25,0,0\"><strong data-path-to-node=\"25,0,0\" data-index-in-node=\"0\">Kimlik Merkezi (IdP):<\/strong> \u015eirket i&ccedil;i kullan\u0131c\u0131 y&ouml;netimi i&ccedil;in <strong data-path-to-node=\"25,0,0\" data-index-in-node=\"57\">Keycloak<\/strong> (A&ccedil;\u0131k kaynak IdP) veya <strong data-path-to-node=\"25,0,0\" data-index-in-node=\"89\">FreeIPA \/ Active Directory<\/strong> altyap\u0131s\u0131 konumland\u0131r\u0131l\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"25,1,0\"><strong data-path-to-node=\"25,1,0\" data-index-in-node=\"0\">Guacamole Taraf\u0131:<\/strong> LDAP, Active Directory veya Keycloak (OpenID) mod&uuml;lleriyle entegre edilerek kurumsal kimliklerle oturum a&ccedil;mas\u0131 sa\u011flan\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"25,2,0\"><strong data-path-to-node=\"25,2,0\" data-index-in-node=\"0\">Teleport Taraf\u0131:<\/strong> GitHub OAuth t&uuml;nellemesi veya Keycloak &uuml;zerindeki OAuth k&ouml;pr&uuml;leri kullan\u0131larak kurumsal kullan\u0131c\u0131 do\u011frulamas\u0131na ba\u011flan\u0131r.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"27\">&nbsp;<\/h2>\n<p data-path-to-node=\"28\">Apache Guacamole ve Teleport kombinasyonu, a&ccedil;\u0131k kaynak d&uuml;nyas\u0131nda CyberArk seviyesinde bir PAM mimarisi kurman\u0131n en efektif yoludur.<\/p>\n<ul data-path-to-node=\"29\">\n<li>\n<p data-path-to-node=\"29,0,0\"><strong data-path-to-node=\"29,0,0\" data-index-in-node=\"0\">Tam Kapsama:<\/strong> Windows\/RDP taraf\u0131nda g&ouml;rsel video kayd\u0131, Linux\/CLI taraf\u0131nda ise sertifika tabanl\u0131 h\u0131zl\u0131 ve g&uuml;venli eri\u015fim elde edilir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"29,1,0\"><strong data-path-to-node=\"29,1,0\" data-index-in-node=\"0\">S\u0131f\u0131r Lisans Maliyeti:<\/strong> Y&uuml;ksek b&uuml;t&ccedil;eli lisans s&ouml;zle\u015fmelerine ba\u011f\u0131ml\u0131 kalmadan %100 a&ccedil;\u0131k kaynak bile\u015fenlerle enterprise g&uuml;venlik standartlar\u0131 yakalan\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"29,2,0\"><strong data-path-to-node=\"29,2,0\" data-index-in-node=\"0\">Geli\u015fmi\u015f Denetim (Auditing):<\/strong> T\u0131pk\u0131 CyberArk PSM gibi, grafik ekranda yap\u0131lan hareketlerin video kayd\u0131na ve terminalde y&uuml;r&uuml;t&uuml;len komutlar\u0131n detayl\u0131 metin loglar\u0131na tek bir mimari &uuml;zerinden eri\u015filebilir.<\/p>\n<\/li>\n<\/ul>\n<\/div>","excerpt":"CyberArk benzeri kapsaml\u0131 bir PAM mimarisini a\u00e7\u0131k kaynak ara\u00e7larla birebir sim\u00fcle etmek m\u00fcmk\u00fcn m\u00fc?","created_at":"2026-07-30 11:17:16","updated_at":"2026-09-23 17:37:54","category_id":6,"view_count":270,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-07-30 08:17:16","featured_image":"\/uploads\/images\/2026\/07\/6a6b087a51a3e_1785399418.png","slug":"acik-kaynak-araclarla-kurumsal-pam","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]