<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On 7 May 2008, at 12:52, Daniel P. Berrange wrote:</div><blockquote type="cite"><br>Take a look at our FreeIPA project. It integrates Kerberos, FreeRadius<br>and Fedora Directory Server into one slick application with a very nice<br>web management interface & command line toolset.<br></blockquote></div><div><br class="webkit-block-placeholder"></div><div>FreeIPA looks interesting, but when I looked at the webpage, my first reaction was buzzword / "consultant speak" overload, followed by the thought "but what does it actually DO?" and I can't seem to find much in terms of hard facts on the site unless I go diving into the source code.</div><div><br class="webkit-block-placeholder"></div><div>I.e. what would it actually buy me for a small to medium sized installation over, say, OpenLDAP + LdapDNS + phpldapadmin for example? A nicer management interface is nice and all, but you have to have a pretty large shop before things change frequently enough that it's a big deal (and the same before multi-master replication becomes important). From the web page I can't even tell if FreeIPA has feature parity with the above combination in terms of what I could do with it. I can see there are some things that FreeIPA supports that I _can't_ do with the above, but unfortunately none of those things matters to me (if I had a larger install it would, though).</div><div><br class="webkit-block-placeholder"></div><div>More specifically, I noticed Debian-based distro's were noticeably absent from the client installation docs, and the docs that are there seems to say very little about what the client installation actually covers (in terms of what applications will actually be able to use the ipa client support). Any plans for Debian support on the client, or at least some info on what needs to be in place?</div><div><br class="webkit-block-placeholder"></div><div>When setting up OpenLDAP here, the biggest problems we ran into was not the server, by the way, but getting all the different apps we use that rely on identity and authorization to actually use PAM or the LDAP server instead of a myriad of other authentication methods. That included building a number of new packages and a ton of updates, and assorted random breakage (our mail server suddenly decided it needed an existing home directory to deliver mail to the users after we made it use LDAP to check for the existence of a user account instead of it's own table, for example) that took a while to sort through. That's something I really hope most/all distro's put more effort into improving...</div><div><br></div><div>I'd really like to hear more about what the actual benefits of FreeIPA are, though... At the moment just getting most apps here reconfigured to use LDAP is/will be a huge improvement, but anything that makes managing the whole thing less painful is very attractive..</div><div><br class="webkit-block-placeholder"></div><div>Vidar</div><div><br class="webkit-block-placeholder"></div><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>-- </div><div>Vidar Hokstad</div><div>Technical Director</div><div>Aardvark Media Limited</div><div><div>Mobile: 0795 867 7857</div><div>Direct Dial: 020 7183 2740</div><div><br class="khtml-block-placeholder"></div><div>2 Fulham Business Exchange</div><div>The Boulevard</div><div>Imperial Wharf</div><div>London</div><div>SW6 2TL</div></div></div></span><br class="Apple-interchange-newline"></div></span><br class="Apple-interchange-newline"></div></span><br class="Apple-interchange-newline"> </div><br></body></html>