FreeIPA
summary
Deployment of FreeIPA as a central Linux authentication infrastructure, including concrete installation commands and client registration using the IPA client. Covers the integrated services 389 Directory Server (LDAP), bind9 DNS, Kerberos single sign‑on, and SSSD client caching; also replication, Active Directory trusts, two‑factor/OTP, required ports and NTP/time settings, mkhomedir and key install flags, plus an automation script that creates about 250 sudo/command groups — all shown from a working company deployment.
AI-written summary · about
chapters (16)
- 0:00FreeIPA intro
- 2:17What is FreeIPA
- 6:55Requirements
- 9:47Installation
- 12:15Client integration
- 13:38SSSD role
- 17:11Host registration
- 18:34Kerberos SSO
- 19:15User and group management
- 21:44HBAC rules
- 23:50Sudo rules with FreeIPA
- 25:16Automate sudo rules
- 27:26Q&A
- 31:48Extending FreeIPA
- 33:14Windows-Linux FreeIPA
- 36:28Summary
related talks
24mSecurity benefits of FreeIPA/IDM
33mFIDO2 authentication for centrally managed users
35mAutomatic joining cloud VMs to FreeIPA identity domain
54mState of authentication and identity in Fedora
33mPractical Federated Identity
19mForeman Single Sign-On Made Easy with Keycloak
24mInternational Patient Access
01h 09mLife beyond FIPS 140-3: identity tales