mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
29ddbc610c
FreeIPA relies on RedHat's Directory Server, which uses mozldap. A FreeIPA build using mozldap would reduce the project's dependencies and redundant code. In addition, mozldap uses NSS instead of OpenSSL. This is beneficial for the reasons listed in [1]. [1] http://fedoraproject.org/wiki/FedoraCryptoConsolidation
-
-
IPA uses Kerberos with an LDAP storage backend and some custom plugins to help manage users and passwords. A UI interface is provided to make user administration and self-service possible. A set of command-line utilities that should provide the same capabilities is in ipa-admintools. Firefox ------- The Gecko engine provides an interface for managing a user's configuration in Javascript. Naturally this is highly protected and the user gets an appropriately dire warning when you try to do this. It also requires signed javascript. During installation a signing certificate is created that creates and signs /usr/share/ipa/html/configure.jar which contains the javascript to update the browser configuration. User's are directed to go to /errors/preferencs.html to load this javascript and apply the changes.