Migrating a Linux environment to IDM
summary
Red Hat IT migrates legacy Kerberos + 389 LDAP to IPA/FreeIPA and sssd, keeping DNS and certs consolidated; team builds cross‑realm Kerberos trust and uses IPA migrate for one‑time imports but relies on custom sync code for gradual coexistence. Migration targets ~12,000 active users, ~50,000 groups (50,000 groups), and phases cut RHCs then Kerberos; tooling for automated cert/SSH workflows and Ansible/Puppet classes exists and mostly works, but schema extensions and dual‑write complexity remain.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:53The Environment
- 3:20IT Manged Systems
- 5:55Migration Plan
- 11:53Data Synchronization
- 13:45Password Migration
- 16:34No lift and shift at all
- 19:05People Hate Change
related talks
45mDeploying and managing IdM with Ansible
38mAAA in Fedora Infrastructure
24mEnd of OpenID in Fedora
39mAnsible deployment and management updates for IdM
33mFIDO2 authentication for centrally managed users
47mScaling Icinga2 with many heterogeneous projects
35mMigrating Your Old Server Products to Be Stateless Cloud Services
49mHerding Certs - How to Automate Certificate Management