mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
remove proposal
This commit is contained in:
parent
fb5ab1d4af
commit
73da58024d
90
proposal.rst
90
proposal.rst
@ -1,90 +0,0 @@
|
|||||||
..
|
|
||||||
Copyright 2015 Red Hat, Inc.
|
|
||||||
|
|
||||||
This work is licensed under the Creative Commons Attribution 4.0
|
|
||||||
International License. To view a copy of this license, visit
|
|
||||||
http://creativecommons.org/licenses/by/4.0/.
|
|
||||||
|
|
||||||
|
|
||||||
Title
|
|
||||||
=====
|
|
||||||
|
|
||||||
Identity Management with FreeIPA
|
|
||||||
|
|
||||||
|
|
||||||
Brief Description
|
|
||||||
=================
|
|
||||||
|
|
||||||
FreeIPA is a centralised identity management system. In this
|
|
||||||
workshop, learn how to deploy FreeIPA servers and enrol client
|
|
||||||
machines, define and manage user, host and service identities, set
|
|
||||||
up access policies, issue digital certificates and configure network
|
|
||||||
services to take advantage of FreeIPA's authentication and
|
|
||||||
authorisation capabilities.
|
|
||||||
|
|
||||||
|
|
||||||
Abstract
|
|
||||||
========
|
|
||||||
|
|
||||||
FreeIPA is an integrated identity management solution providing
|
|
||||||
centralised user, host and service management, authentication and
|
|
||||||
authorisation in Linux/UNIX networked environments, with a focus on
|
|
||||||
ease of deployment and management. It is built on top of well-known
|
|
||||||
Open Source technologies and standards including 389 Directory
|
|
||||||
Server, MIT Kerberos and Dogtag Certificate System.
|
|
||||||
|
|
||||||
This hand-on workshop will provide participants with a comprehensive
|
|
||||||
introduction to FreeIPA including server deployment and
|
|
||||||
administration, client machine enrolment, and configuring server
|
|
||||||
software to use FreeIPA's centralised identity and policy store.
|
|
||||||
|
|
||||||
Participants will:
|
|
||||||
|
|
||||||
- Install a FreeIPA server and replica
|
|
||||||
- Enrol client machines in the domain
|
|
||||||
- Create and administer users
|
|
||||||
- Manage host-based access control (HBAC) policies
|
|
||||||
- Issue X.509 certificates for network services
|
|
||||||
- Configure a web server to use FreeIPA for user authentication and
|
|
||||||
access control
|
|
||||||
|
|
||||||
There will be a number of elective units which participants can
|
|
||||||
choose, based on their progress and particular use cases:
|
|
||||||
|
|
||||||
- OTP two-factor authentication
|
|
||||||
- Advanced certificate management: profiles, sub-CAs and user
|
|
||||||
certificates
|
|
||||||
- OpenSSH key management
|
|
||||||
- Federated identity with Ipsilon
|
|
||||||
- User self-service secret management
|
|
||||||
- ...and more!
|
|
||||||
|
|
||||||
Project URL: http://www.freeipa.org/
|
|
||||||
|
|
||||||
|
|
||||||
Additional notes
|
|
||||||
================
|
|
||||||
|
|
||||||
The workshop will begin with a short presentation about FreeIPA,
|
|
||||||
concurrently with a demonstration of the install process (which
|
|
||||||
takes several minutes). Participants will then install a FreeIPA
|
|
||||||
server themselves, and begin working through the curriculum. At
|
|
||||||
intervals supporting material, topics for further exploration, and
|
|
||||||
abbreviated walkthroughs of the core curriculum modules will be
|
|
||||||
presented.
|
|
||||||
|
|
||||||
Participants will deploy the server and client machines either on a
|
|
||||||
public cloud (conditional on Internet access and finding a willing
|
|
||||||
sponsor) or on their own hypervisor. The precise format is yet to
|
|
||||||
be determined. Hardware/software requirements and expected
|
|
||||||
preparation will be communicated in advance of the conference.
|
|
||||||
|
|
||||||
|
|
||||||
Speaker Bio
|
|
||||||
===========
|
|
||||||
|
|
||||||
Fraser is an identity management engineer at Red Hat where he works
|
|
||||||
on FreeIPA and the Dogtag Certificate System. He cares about
|
|
||||||
security and cryptography (and making it easier for humans to get
|
|
||||||
right!) and is deeply interested in functional programming, type
|
|
||||||
theory and theorem proving.
|
|
Loading…
Reference in New Issue
Block a user