Go to file
Simo Sorce adf8aabf10
Use GSS-SPNEGO if connecting locally
GSS-SPNEGO allows us to negotiate a SASL bind with less roundtrips
therefore use it when possible.

We only enable it for local connections for now because we only
recently fixed Cyrus SASL to do proper GSS-SPNEGO negotiation. This
change means a newer and an older version are not compatible.

Restricting ourselves to the local host prevents issues with
incompatible services, and it is ok for us as we are only really
looking for speedups for the local short-lived connections performed
by the framework. Most other clients have longer lived connections,
so peformance improvements there are not as important.

Ticket: https://pagure.io/freeipa/issue/6656

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
2017-03-07 20:09:57 +01:00
asn1 Build: fix distribution of asn1/asn1c files 2016-11-09 13:08:32 +01:00
client Clarify meaning of --domain and --realm in installers 2017-01-05 09:47:25 +01:00
contrib lite-server: validate LDAP connection and cache schema 2017-02-23 18:55:38 +01:00
daemons Use RemoveOnStop to cleanup systemd sockets 2017-02-17 15:19:07 +01:00
doc scripts, tests: explicitly set confdir in the rest of server code 2017-02-22 08:07:48 +00:00
init ipa systemd unit should define Wants=network instead of Requires=network 2017-03-07 20:06:35 +01:00
install WebUI: Change structure of Identity submenu 2017-03-07 20:04:01 +01:00
ipaclient Vault: port key wrapping to python-cryptography 2017-03-02 14:22:11 +01:00
ipalib Fix cookie with Max-Age processing 2017-03-06 10:48:32 +00:00
ipaplatform Remove NSPRError exception from platform tasks 2017-03-01 15:58:59 +01:00
ipapython Use GSS-SPNEGO if connecting locally 2017-03-07 20:09:57 +01:00
ipaserver WebUI: Change structure of Identity submenu 2017-03-07 20:04:01 +01:00
ipatests Add SHA256 fingerprints for certs 2017-03-07 19:52:43 +01:00
po Lowered the version of gettext 2016-12-09 14:01:06 +01:00
pypi Add placeholders for ipaplatform, ipaserver and ipatests 2017-03-02 14:43:37 +01:00
util C compilation fixes and hardening 2017-03-01 10:38:01 +01:00
.git-commit-template git: Add commit template 2016-11-14 18:15:04 +01:00
.gitignore Clean / ignore make check artefact 2017-01-18 09:19:15 +01:00
.mailmap Update Contributors.txt 2017-02-23 10:16:44 +01:00
.test_runner_config.yaml Travis CI: Upload the logs from failed jobs to transfer.sh 2017-02-09 13:26:07 +01:00
.travis_run_task.sh Travis CI: actually return non-zero exit status when the test job fails 2017-01-09 15:22:51 +01:00
.travis.yml Travis CI: Upload the logs from failed jobs to transfer.sh 2017-02-09 13:26:07 +01:00
ACI.txt Support for Certificate Identity Mapping 2017-03-02 15:09:42 +01:00
API.txt Support for Certificate Identity Mapping 2017-03-02 15:09:42 +01:00
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 2010-11-29 11:39:55 -05:00
BUILD.txt We don't offer no quickies 2017-03-06 13:13:10 +01:00
configure.ac Add placeholders for ipaplatform, ipaserver and ipatests 2017-03-02 14:43:37 +01:00
Contributors.txt Update Contributors.txt 2017-02-23 10:16:44 +01:00
COPYING Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
COPYING.openssl Add a clear OpenSSL exception. 2015-02-23 16:25:54 +01:00
freeipa.spec.in Change README to use Markdown 2017-03-02 16:55:57 +01:00
ignore_import_errors.py makeapi, makeaci: do not fail on missing imports 2016-10-24 14:11:08 +02:00
ipa Revert "Switch /usr/bin/ipa to Python 3" 2016-06-14 13:07:04 +02:00
ipasetup.py.in Bump python-cryptography version in ipasetup.py.in 2017-02-17 10:15:16 +01:00
make-doc Make an ipa-tests package 2013-06-17 19:22:50 +02:00
make-test Use pytest conftest.py and drop pytest.ini 2017-01-05 17:37:02 +01:00
makeaci makeapi, makeaci: do not fail on missing imports 2016-10-24 14:11:08 +02:00
makeapi Python3 pylint fixes 2016-11-25 16:18:22 +01:00
Makefile.am Change README to use Markdown 2017-03-02 16:55:57 +01:00
Makefile.python.am Default to pkginstall=true without duplicated definitions 2017-03-02 14:43:37 +01:00
makerpms.sh Build: update makerpms.sh to use same paths as rpmbuild 2016-11-16 09:12:07 +01:00
pylint_plugins.py Change session handling 2017-02-15 07:13:37 +01:00
pylintrc Pylint: whitelist packages with extension modules 2016-11-22 17:37:39 +01:00
README.md Change README to use Markdown 2017-03-02 16:55:57 +01:00
server.m4 Client-only builds with --disable-server 2017-02-22 15:48:36 +01:00
VERSION.m4 Support for Certificate Identity Mapping 2017-03-02 15:09:42 +01:00
zanata.xml Zanata: exlude testing ipa.pot file 2016-11-21 14:47:47 +01:00

FreeIPA Server

FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based managment tools.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

FreeIPA can seamlessly integrate into an Active Directory environment via cross-realm Kerberos trust or user synchronization.

Benefits

FreeIPA:

  • Allows all your users to access all the machines with the same credentials and security settings
  • Allows users to access personal files transparently from any machine in an authenticated and secure way
  • Uses an advanced grouping mechanism to restrict network access to services and files only to specific users
  • Allows central management of security mechanisms like passwords, SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  • Enables delegation of selected administrative tasks to other power users
  • Integrates into Active Directory environments

Components

The FreeIPA project provides unified installation and management tools for the following components:

Project Website

Releases, announcements and other information can be found on the IPA server project page at http://www.freeipa.org/ .

Documentation

The most up-to-date documentation can be found at http://freeipa.org/page/Documentation .

Quick Start

To get started quickly, start here: http://www.freeipa.org/page/Quick_Start_Guide

Licensing

Please see the file called COPYING.

Contacts