Questions tagged [freeipa]

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is an integrated security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag (Certificate System). It consists of a web interface and command-line administration tools.

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

Multiple FreeIPA servers can easily be configured in a FreeIPA Domain in order to provide redundancy and scalability. The 389 Directory Server is the main data store and provides a full multi-master LDAPv3 directory infrastructure. Single-Sign-on authentication is provided via the MIT Kerberos KDC. Authentication capabilities are augmented by an integrated Certificate Authority based on the Dogtag project. Optionally Domain Names can be managed using the integrated ISC Bind server.

Security aspects related to access control, delegation of administration tasks and other network administration tasks can be fully centralized and managed via the Web UI or the ipa Command Line tool.

230 questions
0
votes
2 answers

How to configure Apache2 to use dogtag pki certificates

FreeIPA uses dogtag and NSS for PKI. Ubuntu and a lot of the world uses OpenSSL. I now have a pair of FreeIPA test servers replicating certificate functionality, and the single interface for authentication, authorization, and DNS is convenient. I'm…
ndemarco
  • 213
  • 1
  • 2
  • 13
0
votes
1 answer

User cannot access host after password reset in freeipa

Password of a user was expired and it was reset after the expiration in freeipa web. The user gets channel 0: open failed: administratively prohibited: open failed stdio forwarding failed error and cannot get in to the host. I have tried to unlock…
Riz
  • 103
  • 3
0
votes
1 answer

ping resolves hostname but dig does not

I'm attempting to set up FreeIPA on a Centos KVM guest and one of the prerequisites is to make sure static hostname is set and that the hostname resolves to guest's IP address. My /etc/hosts file is as follows: 27.0.0.1 localhost…
0
votes
1 answer

How to set Base DN from FreeIPA to Crowd OpenLDAP directory?

In the Crowd's directory adding item, it can add OpenLDAP and must set Base DN in it. However, how to find or set Base DN on the FreeIPA server? Crowd: FreeIPA: If don't set the right data corectlly, it will cause this error when add a new group…
rawmain
  • 291
  • 1
  • 7
  • 17
-1
votes
3 answers

has no MX record

I have two servers running CentOS release 6.5 (Final). In one of them is installed FreeIPA: Name: freeipa.fi.example.com IP: 192.168.99.50 And the other Zimbra as mail server: Name: freeipa.fi.example.com IP: 192.168.99.2 In FreeIPA I created a…
MariaJoseK
  • 21
  • 1
  • 2
1 2 3
15
16