Questions tagged [freeipa]

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is an integrated security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag (Certificate System). It consists of a web interface and command-line administration tools.

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

Multiple FreeIPA servers can easily be configured in a FreeIPA Domain in order to provide redundancy and scalability. The 389 Directory Server is the main data store and provides a full multi-master LDAPv3 directory infrastructure. Single-Sign-on authentication is provided via the MIT Kerberos KDC. Authentication capabilities are augmented by an integrated Certificate Authority based on the Dogtag project. Optionally Domain Names can be managed using the integrated ISC Bind server.

Security aspects related to access control, delegation of administration tasks and other network administration tasks can be fully centralized and managed via the Web UI or the ipa Command Line tool.

105 questions
0
votes
1 answer

FreeIPA split in container

I am currently looking into the possibilities of FreeIPA and especially running it in containers. My question is what parts of FreeIPA can run individually in containers without losing manageability or functionality of FreeIPA, in other words, is…
Harry
  • 1
  • 1
0
votes
1 answer

SonarQube 5.6 LDAP (FreeIPA) authenticated users have no groups

I saw some posts on stackoverflow, like this one and this, but problem still exists. I updated sonarqube from 5.3 to 5.6. Here's example of my…
obohovyk
  • 482
  • 2
  • 5
  • 12
0
votes
2 answers

Jenkins use LDAP Groups with Project Matrix Auth

So I have a Jenkins server that is connected to my FreeIPA LDAP servers and I am using Project-based Matrix Authorization. When I add an individual user and assign permissions all works as expected but if I use a group then try to log in as a…
SnazzyBootMan
  • 669
  • 2
  • 15
  • 30
0
votes
1 answer

OpenLDAP Local configuration for Application Authentication

I have installed openLDAP on a Centos 7 server that is already running FreeIPA for user authentication. http://www.tecmint.com/setup-ldap-server-and-configure-client-authentication The purpose of openLDAP is for a Nodejs application to manage users…
SnazzyBootMan
  • 669
  • 2
  • 15
  • 30
0
votes
1 answer

Artifactory + FreeIPA Integration

I am having trouble getting the LDAP configuration working in Artifactory against FreeIPA and I am getting strange results when testing. Does anyone this setup working? Here are my settings in Artifactory: Artifactor Settings The section of the…
Mike J
  • 3
  • 2
0
votes
2 answers

How to connect correctly FreeIpaClient api 2.164 with FreeIpaServer api 2.156

I'm trying to develop an Ansible which install freeipa clients regardless of operating system. I fixed many issues, but I can't fix the following: ipaclient1 version --> 3.3.4 (Ubuntu 14) ipaclient2 version --> 4.3.1 (Ubuntu 16) ipaclient3 version…
0
votes
1 answer

What are "Positive entries" and "Negative entries" in NSCD (Named Service Cache Deamon) for FreeIPA

The "Positive entries" and "Negative entries" stats are in the nscd -g command under "hosts cache" section. From the nscd.conf manual, I see that "positive entries are successful queries in the specified cache" and "negative entries (unsuccessful…
0
votes
1 answer

Monitor console activities of RedHat IDM

I want to monitor the console activities such as who login, Any new users got created and new hosts got added for my PCI Activity. Unable to figure out in which logs the above mentioned info is present I have looked into…
user60679
  • 709
  • 14
  • 28
0
votes
2 answers

"Pull" Kerberos / Freeipa Keytabs from IPA server -> to local server

I am in a rather unenviable position of Administering a Hortonworks (Ambari) installation, which is using Kerberos, in a completely closed system. Here is the problem: I have found an inconsistency in the keytab file (let's call it foo) on server…
chocksaway
  • 870
  • 1
  • 10
  • 21
0
votes
1 answer

FreeIPA: unable to run ipa commands

I have installed FreeIPA server and created one user.After some time user account got locked so I tried to unlock it using ipa user-unlock but I am faicng issue while Performing ipa commands .Following is the issue that I am facing: ipa: ERROR:…
0
votes
0 answers

Chef, LDAP and Self-Signed Certs

I'm attempting to use freeIPA with Chef LDAP and running into issues, mainly Chef reports that 'The LDAP server is not available' in the frontend. I have confirmed that LDAP is available (ssh users are able to get in via LDAP). The IPA server has a…
Michael Hill
  • 85
  • 1
  • 1
  • 6
0
votes
0 answers

FreeIPA Web UI extension - How far can I go?

I noticed that when I add an attribute extension to the FreeIPA UI, I can add new "TEXT" fields only. can I change the field type? for example display a dropdown list instead of the text filed. I know this question is not about programming. but it…
Muhmmad Aziz
  • 393
  • 5
  • 17
0
votes
1 answer

FreeIPA no host replication

I have problem with replication of hosts enrolled to FreeIPA between my IPA server and replica (both Centos 6.6 ipa-server-3.0.0). If the host is enrolled to replica I can't see it on Master WEB UI. Although user replication works and the host seem…
MMT
  • 1,931
  • 3
  • 19
  • 35
-1
votes
1 answer

Error when installing FreeIPA on CentOS

I've gotten a message saying I've successfully installed FreeIPA on my CentOS machine, but when I try to log into it from my browser I get this message. My host name is mike.imagine So I typed in https://mike.imagine.com/ipa/ui/ and I get "400 Bad…
Mike Shobes
  • 59
  • 1
  • 6
-1
votes
2 answers

Free-IPA Ldap Intergration with GO

I am trying FreeIPA integration with golang using package "gopkg.in/ldap.v2", I created one role with name of "test" in FreeIPA UI and tried to search that role via command line: ldapsearch -D "cn=directory manager" -w "*****" -p 389 -h…
1 2 3 4 5 6
7