1 2<!DOCTYPE html> 3 4 5<html lang="en" data-content_root="./" > 6 7 <head> 8 <meta charset="utf-8" /> 9 <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" /> 10 11 <title>About — FreeIPA documentation</title> 12 13 14 15
15<script data-cfasync="false"> 16 document.documentElement.dataset.mode = localStorage.getItem("mode") || ""; 17 document.documentElement.dataset.theme = localStorage.getItem("theme") || ""; 18 </script>
18 19 <!-- 20 this give us a css class that will be invisible only if js is disabled 21 --> 22 <noscript> 23 <style> 24 .pst-js-only { display: none !important; } 25 26 </style> 27 </noscript> 28 29 <!-- Loaded before other Sphinx assets --> 30 <link href="_static/styles/theme.css?digest=90905a2f556bf617f1a9" rel="stylesheet" /> 31<link href="_static/styles/pydata-sphinx-theme.css?digest=90905a2f556bf617f1a9" rel="stylesheet" /> 32 33 <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=8f2a1f02" /> 34 <link rel="stylesheet" type="text/css" href="_static/styles/sphinx-book-theme.css?v=4418a689" /> 35 36 <!-- So that users can add custom icons --> 37
37<script defer src="_static/scripts/fontawesome.js?digest=90905a2f556bf617f1a9"></script>
37 38 <!-- Pre-loaded scripts that we'll load fully later --> 39 <link rel="preload" as="script" href="_static/scripts/bootstrap.js?digest=90905a2f556bf617f1a9" /> 40<link rel="preload" as="script" href="_static/scripts/pydata-sphinx-theme.js?digest=90905a2f556bf617f1a9" /> 41 42
42<script src="_static/documentation_options.js?v=9eb32ce0"></script>
42 43
43<script src="_static/doctools.js?v=fd6eb6e6"></script>
43 44
44<script src="_static/sphinx_highlight.js?v=6ffebe34"></script>
44 45
45<script src="_static/scripts/sphinx-book-theme.js?v=fab101a9"></script>
45 46
46<script>DOCUMENTATION_OPTIONS.pagename = 'About';</script>
46 47
47<script>DOCUMENTATION_OPTIONS.search_as_you_type = false;</script>
47 48 <link rel="icon" href="_static/favicon.png"/> 49 <link rel="index" title="Index" href="genindex.html" /> 50 <link rel="search" title="Search" href="search.html" /> 51 <link rel="next" title="Contribute" href="Contribute.html" /> 52 <link rel="prev" title="FreeIPA 4.12.1" href="release-notes/4-12-1.html" /> 53 <meta name="viewport" content="width=device-width, initial-scale=1"/> 54 <meta name="docsearch:language" content="en"/> 55 <meta name="docsearch:version" content="" /> 56 57 58
58<script src="_static/searchtools.js"></script>
58 59
59<script src="_static/language_data.js"></script>
59 60
60<script src="searchindex.js"></script>
60 61 62 </head> 63 <body data-default-mode=""> 64 65 66 <div id="pst-skip-link" class="skip-link d-print-none"><a href="#main-content">Skip to main content</a></div> 67 68 69 <div id="pst-scroll-pixel-helper"></div> 70 71 <button type="button" class="btn rounded-pill" id="pst-back-to-top"> 72 <i class="fa-solid fa-arrow-up"></i>Back to top</button> 73 74 75 76 77 <dialog id="pst-search-dialog"> 78 79<form class="bd-search d-flex align-items-center" 80 action="search.html" 81 method="get"> 82 <i class="fa-solid fa-magnifying-glass"></i> 83 <input type="search" 84 class="form-control" 85 name="q" 86 placeholder="Search..." 87 aria-label="Search..." 88 autocomplete="off" 89 autocorrect="off" 90 autocapitalize="off" 91 spellcheck="false"/> 92 <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd>K</kbd></span> 93</form> 94 </dialog> 95 96 <div class="pst-async-banner-revealer d-none"> 97 <aside id="bd-header-version-warning" class="d-none d-print-none" aria-label="Version warning"></aside> 98</div> 99 100 101 <header id="pst-header" class="bd-header navbar navbar-expand-lg bd-navbar d-print-none"> 102<div class="bd-header__inner bd-page-width"> 103 <button class="pst-navbar-icon sidebar-toggle primary-toggle" aria-label="Site navigation"> 104 <span class="fa-solid fa-bars"></span> 105 </button> 106 107 108 <div class="col-lg-9 navbar-header-items"> 109 110 111 <div class="navbar-header-items__end"> 112 113 <div class="navbar-item navbar-persistent--container"> 114 115 116<button class="btn search-button-field search-button__button pst-js-only" title="Search" aria-label="Search" data-bs-placement="bottom" data-bs-toggle="tooltip"> 117 <i class="fa-solid fa-magnifying-glass"></i> 118 <span class="search-button__default-text">Search</span> 119 <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd class="kbd-shortcut__modifier">K</kbd></span> 120</button> 121 </div> 122 123 124 </div> 125 126 </div> 127 128 129 <div class="navbar-persistent--mobile"> 130 131<button class="btn search-button-field search-button__button pst-js-only" title="Search" aria-label="Search" data-bs-placement="bottom" data-bs-toggle="tooltip"> 132 <i class="fa-solid fa-magnifying-glass"></i> 133 <span class="search-button__default-text">Search</span> 134 <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd class="kbd-shortcut__modifier">K</kbd></span> 135</button> 136 </div> 137 138 139 140 <button class="pst-navbar-icon sidebar-toggle secondary-toggle" aria-label="On this page"> 141 <span class="fa-solid fa-outdent"></span> 142 </button> 143 144</div> 145 146 </header> 147 148 149 <div class="bd-container"> 150 <div class="bd-container__inner bd-page-width"> 151 152 153 154 <dialog id="pst-primary-sidebar-modal"></dialog> 155 <div id="pst-primary-sidebar" class="bd-sidebar-primary bd-sidebar"> 156 157 158 159 <div class="sidebar-header-items sidebar-primary__section"> 160 161 162 163 164 </div> 165 166 <div class="sidebar-primary-items__start sidebar-primary__section"> 167 <div class="sidebar-primary-item"><a class="navbar-brand logo" href="/"> 168 <img src="https://raw.githubusercontent.com/freeipa/freeipa.github.io/main/src/_static/freeipa-logo-small.png" class="logo__image" alt="Logo image" /> 169</a></div> 170 <div class="sidebar-primary-item"> 171 172<button class="btn search-button-field search-button__button pst-js-only" title="Search" aria-label="Search" data-bs-placement="bottom" data-bs-toggle="tooltip"> 173 <i class="fa-solid fa-magnifying-glass"></i> 174 <span class="search-button__default-text">Search</span> 175 <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd class="kbd-shortcut__modifier">K</kbd></span> 176</button></div> 177 <div class="sidebar-primary-item"><div class="sidebar-primary-item"> 178 <nav class="bd-links" id="bd-docs-nav" aria-label="Main"> 179 <div class="bd-toc-item navbar-nav active"> 180 <ul class="nav bd-sidenav"> 181 <li class="toctree-l1"><a class="reference internal" href="/About.html">About</a></li> 182 <li class="toctree-l1"><a class="reference internal" href="/Contribute.html">
182Contribute</a></li> 183 <li class="toctree-l1"><a class="reference internal" href="/page/Documentation.html">Documentation</a></li> 184 <li class="toctree-l1"><a class="reference internal" href="/page/Troubleshooting.html">Troubleshooting</a></li> 185 <li class="toctree-l1"><a class="reference internal" href="/Downloads.html">Downloads</a></li> 186 </ul> 187 </div> 188 </nav> 189</div></div> 190 </div> 191 192 193 <div class="sidebar-primary-items__end sidebar-primary__section"> 194 <div class="sidebar-primary-item"> 195<div id="ethical-ad-placement" 196 class="flat" 197 data-ea-publisher="readthedocs" 198 data-ea-type="readthedocs-sidebar" 199 data-ea-manual="true"> 200</div></div> 201 </div> 202 203 204 </div> 205 206 <main id="main-content" class="bd-main" role="main"> 207 208 209 210<div class="sbt-scroll-pixel-helper"></div> 211 212 <div class="bd-content"> 213 <div class="bd-article-container"> 214 215 <div class="bd-header-article d-print-none"> 216<div class="header-article-items header-article__inner"> 217 218 <div class="header-article-items__start"> 219 220 <div class="header-article-item"><button class="sidebar-toggle primary-toggle btn btn-sm" title="Toggle primary sidebar" data-bs-placement="bottom" data-bs-toggle="tooltip"> 221 <span class="fa-solid fa-bars"></span> 222</button></div> 223 224 </div> 225 226 227 <div class="header-article-items__end"> 228 229 <div class="header-article-item"> 230 231<div class="article-header-buttons"> 232 233 234 235 236 237<div class="dropdown dropdown-download-buttons"> 238 <button class="btn dropdown-toggle" type="button" data-bs-toggle="dropdown" aria-expanded="false" aria-label="Download this page"> 239 <i class="fas fa-download"></i> 240 </button> 241 <ul class="dropdown-menu"> 242 243 244 245 <li><a href="_sources/About.rst" target="_blank" 246 class="btn btn-sm btn-download-source-button dropdown-item" 247 title="Download source file" 248 data-bs-placement="left" data-bs-toggle="tooltip" 249> 250 251 252<span class="btn__icon-container"> 253 <i class="fas fa-file"></i> 254 </span> 255<span class="btn__text-container">.rst</span> 256</a> 257</li> 258 259 260 261 262 <li> 263<button onclick="window.print()" 264 class="btn btn-sm btn-download-pdf-button dropdown-item" 265 title="Print to PDF" 266 data-bs-placement="left" data-bs-toggle="tooltip" 267> 268 269 270<span class="btn__icon-container"> 271 <i class="fas fa-file-pdf"></i> 272 </span> 273<span class="btn__text-container">.pdf</span> 274</button> 275</li> 276 277 </ul> 278</div> 279 280 281 282 283<button onclick="toggleFullScreen()" 284 class="btn btn-sm btn-fullscreen-button pst-navbar-icon" 285 title="Fullscreen mode" 286 data-bs-placement="bottom" data-bs-toggle="tooltip" 287> 288 289 290<span class="btn__icon-container"> 291 <i class="fas fa-expand"></i> 292 </span> 293 294</button> 295 296 297 298<div class="theme-switch-container dropdown pst-js-only" data-bs-toggle="tooltip" data-bs-placement="bottom" title="Color mode"> 299 <button class="btn btn-sm nav-link pst-navbar-icon theme-switch-button dropdown-toggle" aria-label="Color mode" data-bs-toggle="dropdown"> 300 <i class="theme-switch fa-solid fa-sun fa-lg fa-fw" data-mode="light" title="Light"></i> 301 <i class="theme-switch fa-solid fa-moon fa-lg fa-fw" data-mode="dark" title="Dark"></i> 302 <i class="theme-switch fa-solid fa-circle-half-stroke fa-lg fa-fw" data-mode="auto" title="System Settings"></i> 303 </button> 304 <ul class="dropdown-menu dropdown-menu-end"> 305 <li><button class="dropdown-item d-flex align-items-center theme-change-button" data-mode="auto"><i class="fa-solid fa-circle-half-stroke fa-lg fa-fw me-1"></i>System Settings</button></li> 306 <li><button class="dropdown-item d-flex align-items-center theme-change-button" data-mode="light"><i class="fa-solid fa-sun fa-lg fa-fw me-1"></i>Light</button></li> 307 <li><button class="dropdown-item d-flex align-items-center theme-change-button" data-mode="dark"><i class="fa-solid fa-moon fa-lg fa-fw me-1"></i>Dark</button></li> 308 </ul> 309</div> 310 311 312<button class="btn btn-sm pst-navbar-icon search-button search-button__button pst-js-only" title="Search" aria-label="Search" data-bs-placement="bottom" data-bs-toggle="tooltip"> 313 <i class="fa-solid fa-magnifying-glass fa-lg"></i> 314</button> 315<button class="sidebar-toggle secondary-toggle btn btn-sm pst-navbar-icon" title="Toggle secondary sidebar" data-bs-placement="bottom" data-bs-toggle="tooltip"> 316 <span class="fa-solid fa-list"></span> 317</button> 318</div></div> 319 320 </div> 321 322</div> 323</div> 324 325 326 327<div id="jb-print-docs-body" class="onlyprint"> 328 <h1>About</h1> 329 <!-- Table of contents --> 330 <div id="print-main-content"> 331 <div id="jb-print-toc"> 332 333 <div> 334 <h2> Contents </h2> 335 </div> 336 <nav aria-label="Page"> 337 <ul class="pst-show_toc_level nav section-nav flex-column"> 338<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#what-is-freeipa">What is FreeIPA?</a><ul class="nav section-nav flex-column"> 339<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#resources">Resources</a></li> 340<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#references">References</a></li> 341</ul> 342</li> 343</ul> 344 </nav> 345 </div> 346 </div> 347</div> 348 349 350 351<div id="searchbox"></div> 352 <article class="bd-article"> 353 354 <section id="about"> 355<h1>About<a class="headerlink" href="#about" title="Link to this heading">#</a></h1> 356<section id="what-is-freeipa"> 357<h2>What is FreeIPA?<a class="headerlink" href="#what-is-freeipa" title="Link to this heading">#</a></h2> 358<p>FreeIPA is an integrated security information management solution 359combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, 360Dogtag (Certificate System). It consists of a web interface and 361command-line administration tools.</p> 362<p>FreeIPA is an integrated Identity and Authentication solution for 363Linux/UNIX networked environments. A FreeIPA server provides centralized 364authentication, authorization and account information by storing data 365about user, groups, hosts and other objects necessary to manage the 366security aspects of a network of computers.</p> 367<p>FreeIPA is built on top of well known Open Source components and 368standard protocols with a very strong focus on ease of management and 369automation of installation and configuration tasks.</p> 370<p>Multiple FreeIPA servers can easily be configured in a FreeIPA Domain in 371order to provide redundancy and scalability. The <a class="reference external" href="http://directory.fedoraproject.org/wiki/Main_Page">389 Directory 372Server</a> is the 373main data store and provides a full multi-master 374<a class="reference external" href="http://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol">LDAPv3</a>
375directory infrastructure. Single-Sign-on authentication is provided via 376the <a class="reference external" href="http://web.mit.edu/kerberos/">MIT</a> 377<a class="reference external" href="http://en.wikipedia.org/wiki/Kerberos_%28protocol%29">Kerberos</a> KDC. 378Authentication capabilities are augmented by an integrated <a class="reference external" href="http://en.wikipedia.org/wiki/Certificate_authority">Certificate 379Authority</a> based 380on the <a class="reference external" href="http://pki.fedoraproject.org/wiki/PKI_Main_Page">Dogtag</a> 381project. Optionally <a class="reference external" href="http://en.wikipedia.org/wiki/Domain_Name_System">Domain 382Names</a> can be 383managed using the integrated <a class="reference external" href="https://www.isc.org/software/bind">ISC 384Bind</a> server.</p> 385<p>Security aspects related to <a class="reference external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/configuring-host-access.html">access 386control</a>, 387<a class="reference external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/sudo.html">delegation</a> 388of administration tasks and other 389<a class="reference external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/automount.html">network</a> 390<a class="reference external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/user-keys.html">administration</a> 391<a class="reference external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/selinux-mapping.html">tasks</a> 392can be fully centralized and managed via the <a class="reference external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html">Web 393UI</a> 394or the <em>ipa</em> Command Line tool.</p> 395<section id="resources"> 396<h3>Resources<a class="headerlink" href="#resources" title="Link to this heading">#</a></h3> 397<ul class="simple"> 398<li><p>Most of our activity happens on the 399<a class="reference external" href="https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/">freeipa-devel</a> 400and 401<a class="reference external" href="https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/">freeipa-user</a> 402mailing lists as well as on the #freeipa IRC channel on the 403<a class="reference external" href="irc://irc.libera.chat">irc://irc.libera.chat</a>.</p></li> 404</ul> 405</section> 406<section id="references"> 407<h3>References<a class="headerlink" href="#references" title="Link to this heading">#</a></h3> 408<p>FreeIPA takes advantage of different technologies:</p> 409<ul class="simple"> 410<li><p><a class="reference external" href="http://k5wiki.kerberos.org/wiki/Main_Page">MIT KDC</a> - core of the 411FreeIPAâs authentication.</p></li> 412<li><p><a class="reference external" href="http://directory.fedoraproject.org/">389 Directory Server</a> - back 413end where FreeIPA keeps all data.</p></li> 414<li><p><a class="reference external" href="http://pki.fedoraproject.org/wiki/PKI_Main_Page">Dogtag Certificate 415System</a> - FreeIPA 416includes CA & RA for certificate management functions.</p></li> 417<li><p><a class="reference external" href="https://sssd.io">SSSD</a> - client side component that integrates 418FreeIPA as a authentication and identity provider in a better way 419than traditional NSS & PAM.</p></li> 420</ul> 421</section> 422</section> 423</section> 424 425 426 </article> 427 428 429 430 431 432 433 <footer class="prev-next-footer d-print-none"> 434 435<div class="prev-next-area"> 436 <a class="left-prev" 437 href="release-notes/4-12-1.html" 438 title="previous page"> 439 <i class="fa-solid fa-angle-left"></i> 440 <div class="prev-next-info"> 441 <p class="prev-next-subtitle">previous</p> 442 <p class="prev-next-title">FreeIPA 4.12.1</p> 443 </div> 444 </a> 445 <a class="right-next" 446 href="Contribute.html" 447 title="next page"> 448 <div class="prev-next-info"> 449 <p class="prev-next-subtitle">next</p> 450 <p class="prev-next-title">
450Contribute</p> 451 </div> 452 <i class="fa-solid fa-angle-right"></i> 453 </a> 454</div> 455 </footer> 456 457 </div> 458 459 460 461 <dialog id="pst-secondary-sidebar-modal"></dialog> 462 <div id="pst-secondary-sidebar" class="bd-sidebar-secondary bd-toc"><div class="sidebar-secondary-items sidebar-secondary__inner"> 463 464 465 <div class="sidebar-secondary-item"><div 466 id="pst-page-navigation-heading-2" 467 class="page-toc tocsection onthispage"> 468 <i class="fa-solid fa-list"></i> Contents 469 </div> 470 <nav id="pst-page-toc-nav" class="page-toc" aria-labelledby="pst-page-navigation-heading-2"> 471 <ul class="pst-show_toc_level nav section-nav flex-column"> 472<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#what-is-freeipa">What is FreeIPA?</a><ul class="nav section-nav flex-column"> 473<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#resources">Resources</a></li> 474<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#references">References</a></li> 475</ul> 476</li> 477</ul> 478 </nav></div> 479 480</div></div> 481 482 483 </div> 484 <footer class="bd-footer-content"> 485 486<div class="bd-footer-content__inner container"> 487 488 <div class="footer-item"> 489 490<p class="component-author"> 491By FreeIPA Team 492</p> 493 494 </div> 495 496 <div class="footer-item"> 497 498 499 <p class="copyright"> 500 501 © Copyright 2023, FreeIPA Team. 502 <br/> 503 504 </p> 505 506 </div> 507 508 <div class="footer-item"> 509 510 </div> 511 512 <div class="footer-item"> 513 514 </div> 515 516</div> 517 </footer> 518 519 520 </main> 521 </div> 522 </div> 523 524 <!-- Scripts loaded after <body> so the DOM is not blocked --> 525
525<script defer src="_static/scripts/bootstrap.js?digest=90905a2f556bf617f1a9"></script>
vendor: 1 bytes, line 525
525
526<script defer src="_static/scripts/pydata-sphinx-theme.js?digest=90905a2f556bf617f1a9"></script>
526 527 528 <footer class="bd-footer"> 529 </footer> 530 </body> 531</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.