Go to file
Jan Cholasta 4cdeacdedf Support MS CS as the external CA in ipa-server-install and ipa-ca-install
Added a new option --external-ca-type which specifies the type of the
external CA. It can be either "generic" (the default) or "ms-cs". If "ms-cs"
is selected, the CSR generated for the IPA CA will include MS template name
extension (OID 1.3.6.1.4.1.311.20.2) with template name "SubCA".

https://fedorahosted.org/freeipa/ticket/4496

Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-10-13 12:18:09 +02:00
.tx Update translations 2013-08-02 16:54:25 +02:00
checks Use /usr/bin/python2 2014-01-03 09:46:05 +01:00
contrib Set master_kdc and dns_lookup_kdc to true 2012-09-19 20:47:12 -04:00
daemons Move OTP synchronization step to after counter writeback 2014-09-30 16:19:06 +02:00
doc Remove the unused ipalib.frontend.Property class 2014-02-21 11:58:00 +01:00
init Remove systemd upgrader as it is not used anymore 2013-08-15 08:49:15 +02:00
install Support MS CS as the external CA in ipa-server-install and ipa-ca-install 2014-10-13 12:18:09 +02:00
ipa-client Fix certmonger search for the CA cert in ipa-certupdate and ipa-cacert-manage 2014-09-30 10:01:38 +02:00
ipalib Allow override of gecos field in ID views 2014-10-13 12:08:50 +02:00
ipaplatform Add RHEL platform module 2014-10-09 15:37:24 +02:00
ipapython Add missing imports to ipapython.certdb 2014-09-30 10:18:08 +02:00
ipaserver Support MS CS as the external CA in ipa-server-install and ipa-ca-install 2014-10-13 12:18:09 +02:00
ipatests DNS missing tests 2014-10-09 10:02:22 +02:00
util ipa-getkeytab: Add support for get_keytab extop 2014-06-26 10:30:53 +02:00
.gitignore ipaplatform: Link to platform module during build time 2014-06-16 19:48:21 +02:00
.mailmap Add Nathaniel McCallum to .mailmap 2014-03-17 12:21:13 +01:00
ACI.txt Allow override of gecos field in ID views 2014-10-13 12:08:50 +02:00
API.txt Allow override of gecos field in ID views 2014-10-13 12:08:50 +02:00
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 2010-11-29 11:39:55 -05:00
BUILD.txt Update README and BUILD 2014-02-12 14:04:07 +01:00
Contributors.txt Correct Jenny Severance's last name 2014-02-12 14:04:07 +01:00
COPYING Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
freeipa.spec.in Support MS CS as the external CA in ipa-server-install and ipa-ca-install 2014-10-13 12:18:09 +02:00
ipa Use /usr/bin/python2 2014-01-03 09:46:05 +01:00
ipa.1 Fix example usage in ipa man page. 2014-10-08 09:52:08 +02:00
lite-server.py Use /usr/bin/python2 2014-01-03 09:46:05 +01:00
make-doc Make an ipa-tests package 2013-06-17 19:22:50 +02:00
make-lint DNSNameParam parameter 2014-06-03 15:55:32 +02:00
make-test Do not hardcode path to ipa-getkeytab in tests 2014-03-13 15:52:18 +01:00
makeaci makeaci: Use the DN where the ACI is stored, not the permission's DN 2014-07-07 14:42:52 +02:00
makeapi Use /usr/bin/python2 2014-01-03 09:46:05 +01:00
Makefile VERSION,Makefile: Rename "pre" to "alpha" 2014-09-30 13:24:26 +02:00
MANIFEST.in Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
README Update README and BUILD 2014-02-12 14:04:07 +01:00
setup-client.py Include the ipa command in client-only build 2014-09-23 20:28:47 +02:00
setup.py Include ipaplatform in client-only build 2014-09-23 20:28:47 +02:00
VERSION Update API version for ID views support 2014-10-13 12:08:50 +02:00
version.m4.in Mass tree reorganization for IPAv2. To view previous history of files use: 2009-02-03 15:27:14 -05:00

                               IPA Server

  Overview
  --------

  FreeIPA allows Linux administrators to centrally manage identity,
  authentication and access control aspects of Linux and UNIX systems
  by providing simple to install and use command line and web based
  managment tools.
  FreeIPA is built on top of well known Open Source components and standard
  protocols with a very strong focus on ease of management and automation
  of installation and configuration tasks.
  FreeIPA can seamlessly integrate into an Active Directory environment via
  cross-realm Kerberos trust or user synchronization.

  Benefits
  --------

  FreeIPA:
  * Allows all your users to access all the machines with the same credentials
    and security settings
  * Allows users to access personal files transparently from any machine in
    an authenticated and secure way
  * Uses an advanced grouping mechanism to restrict network access to services
    and files only to specific users
  * Allows central management of security mechanisms like passwords,
    SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  * Enables delegation of selected administrative tasks to other power users
  * Integrates into Active Directory environments

  Components
  ----------

  The FreeIPA project provides unified installation and management
  tools for the following components:

  * LDAP Server - based on the 389 project (LDAP)
    http://directory.fedoraproject.org/wiki/Main_Page

  * KDC - based on MIT Kerberos implementation
    http://k5wiki.kerberos.org/wiki/Main_Page

  * PKI based on Dogtag project
    http://pki.fedoraproject.org/wiki/PKI_Main_Page

  * Samba libraries for Active Directory integration
    http://www.samba.org/

  * DNS Server based on BIND and the Bind-DynDB-LDAP plugin
    https://www.isc.org/software/bind
    https://fedorahosted.org/bind-dyndb-ldap


  Project Website
  ---------------

  Releases, announcements and other information can be found on the IPA
  server project page at <http://www.freeipa.org/>.

  Documentation
  -------------

  The most up-to-date documentation can be found at
  <http://freeipa.org/page/Documentation>.

  Quick Start
  -----------

  To get started quickly, start here:
  <http://www.freeipa.org/page/Quick_Start_Guide>

  Licensing
  ---------

  Please see the file called COPYING.

  Contacts
  --------

     * If you want to be informed about new code releases, bug fixes,
       security fixes, general news and information about the IPA server
       subscribe to the freeipa-announce mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-interest/>.

     * If you have a bug report please submit it at:
       <https://bugzilla.redhat.com>

     * If you want to participate in actively developing IPA please
       subscribe to the freeipa-devel mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-devel/> or join
       us in IRC at irc://irc.freenode.net/freeipa