Questions tagged [freeipa]

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is an integrated security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag (Certificate System). It consists of a web interface and command-line administration tools.

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

Multiple FreeIPA servers can easily be configured in a FreeIPA Domain in order to provide redundancy and scalability. The 389 Directory Server is the main data store and provides a full multi-master LDAPv3 directory infrastructure. Single-Sign-on authentication is provided via the MIT Kerberos KDC. Authentication capabilities are augmented by an integrated Certificate Authority based on the Dogtag project. Optionally Domain Names can be managed using the integrated ISC Bind server.

Security aspects related to access control, delegation of administration tasks and other network administration tasks can be fully centralized and managed via the Web UI or the ipa Command Line tool.

105 questions
1
vote
2 answers

grep output of command and display all lines that match a string

I'm trying to display all disabled accounts from the command: ipa user-find --all The basic output of the command shows something like this: dn: uid=johnd,cn=users,cn=accounts,dc=mydomain,dc=com User login: johnd First Name: John Last Name:…
Mike D
  • 365
  • 6
  • 16
1
vote
1 answer

When using FreeIPA, can you use a tld such as company.com?

Ill get straight into it. We are testing FreeIPA for centralized auth and (local)DNS, however we would like to use our tld company.com as these are internet facing servers and the applications require a resolvable FQDN. We already use Dyn for…
D.Nygate
  • 11
  • 2
1
vote
1 answer

employeeNumber in FreeIPA/IPA using ldapsearch

Is there a way to use the ldapsearch against FreeIPA to return the uid AND employeeNumber? Using a simple ldapsearch does not expose all the attributes. Is there something I am overlooking?
farhany
  • 1,243
  • 2
  • 17
  • 29
1
vote
2 answers

How to integrate freeipa with cacti?

I have a cacti and a freeipa server running fine. i want a user of cacti that is created from freeipa. i'm having a real pain. how to do it ? any step by step procedure or link can help
Arup Barua
  • 51
  • 1
  • 2
  • 7
1
vote
1 answer

FreeIPA can't see LDAP custom attributes

I'm trying to add new attributes to FreeIPA, I added the custom attribute and object class to the LDAP using 'ldapmodify', #color.ldif dn: cn=schema changetype: modify add: attributeTypes attributeTypes: (…
Muhmmad Aziz
  • 393
  • 5
  • 17
1
vote
1 answer

LDAP- adding new attribute schema using ldapmodify

I am trying to add a new schema to FreeIPA, I am following the tutorial "Extending the FreeIPA Server", in order to add a new schema I have to use 'ldapmodify' command. but I get this result: [root@rnddomain schema]# ldapmodify -D "cn=admin" -W -f…
Muhmmad Aziz
  • 393
  • 5
  • 17
1
vote
1 answer

incorrect permissions when home directory is automatically created in FreeIPA

I have configured an IPA domain for my systems and also enabled automatically creating home directory when user logs in with --enablemkhomedir option. the problem I have is whenever a user logs in, a home directory will create for it with 755…
farzad
  • 368
  • 1
  • 3
  • 15
0
votes
0 answers

How can I authorize a connection between two Gitlab and Freeipa containers (LDAP)?

here's my problem. I have a Freeipa LDAP (centos-8-stream-4.9.8) instance and another Gitlab (16.0.2-ee.0) instance running locally in two separate containers. These instances were launched via a docker-compose. No problem for these instances, both…
Dyn amo
  • 125
  • 1
  • 7
0
votes
1 answer

FreeIPA LDAPSearch for group membership

Freeipa 4.9.10 Rocky 8.7 LdapSearch 2.4.46 I am trying to get the list of user's uid that belongs to specific group. Then ultimately get the email address of those users. ldapsearch -x -H ldap://10.0.0.33 -W -D "cn=Directory Manager"…
0
votes
1 answer

RHEL: 10.6.5. Checking if chrony is synchronized - selected sources does not match chronyd selected sources

I need clarification on these synchronizing results, [root@rockyidm1a etc]# systemctl status chronyd ● chronyd.service - NTP client/server Loaded: loaded (/usr/lib/systemd/system/chronyd.service; enabled; vendor preset: enabled) Active:…
VcDeveloper
  • 393
  • 4
  • 12
0
votes
0 answers

FREEIPA LDAP Server not working : [SSL: CERTIFICATE_VERIFY_FAILED]

[root@ipa ~]# ipa -v ping ipa: INFO: trying https://ipa.ca.example.com/ipa/json ipa: INFO: Connection to https://ipa.ca.example.com/ipa/json failed with [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) ipa: INFO: trying…
Sanjay
  • 1
0
votes
0 answers

squid authentication with freeipa which exported the users from AD windows

salut . I hope everything goes well for you. I'm attempting to set up a squid proxy and have a freeipa server as my identifier. Everything works properly when I perform the authentication of the users I've created in freeipa. The lab will go…
0
votes
0 answers

How to install Noggin for FreeIPA?

There is a self-service portal for FreeIPA called Noggin. On the official page, in the "Install" section, there is only the note "TODO: Cover end-user installation here.". I couldn't find any intelligible documentation on implementation and…
Serg
  • 1
0
votes
0 answers

DirName and serial number to the X509 Authority Key Identifier extension

I'm trying to add DirName and serial number to the X509 Authority Key Identifier extension using the FreeIPA/IDM server (not openssl) so it will looks like X509v3 Authority Key…
0
votes
0 answers

freeipa restrict access of sudorules

i have a user admin who need to run some commands as other users with sudo privileges example: sudo -u dev_dummy chown /tmp/dump_file for that i created : hbac rule : to grant access to sudo service Description: Generated_rule_dummy_sudo …
Karim Sad
  • 9
  • 1
  • 6