From Free IPA

Contents 1 IPA v2 Development Progress 2 Design 2.1 IPA Client 2.2 IPA Server 2.2.1 Kerberos 2.2.2 CA Integration 2.2.3 Policy 2.2.4 Audit 2.2.5 Back End Concepts 2.2.6 Plugin framework 2.2.7 DNS integration 2.2.8 389 Directory Server 2.2.9 Default configurations for IPA components 2.3 IPA Server Reference Pages 3 User Interface Design 4 Current progress 4.1 IPA Server 4.1.1 Test Repository 4.2 IPA Client 4.3 DNS integration 4.3.1 Dynamic loading of DLZ drivers 4.3.2 IPA LDAP driver 4.3.3 BIND DLZ write-back support patch 5 Documentation 6 Developer Documentation 6.1 Documentation Repository

IPA v2 Development Progress

This page and all pages it links to are a work in progress. Please note that any content may be changed as the development progresses.

Design

IPA Client

• IPA Client Design Overview
• Service Controller Daemon

IPA Server

Kerberos

• Automatic Ticket Renewal - stable version

CA Integration

• Certificate Management - stable version

Policy

THIS EFFORT IS DEFERRED

• Overall Design of Policy Related Components
• Integration with SELinux
• Complete SUDO Policy Example

Audit

THIS EFFORT IS DEFERRED

• Audit Design Overview

Back End Concepts

• Concepts and Objects - Description of the new concepts (stable version)
• DS Design Summary - base objects (stable version)
• DS Design Summary 2 - policy objects (stable version)
• Schema for loading and processing - based on the design pages above

Plugin framework

• Tutorial for Plugin Authors
• Python API documentation - Generated automatically from source code using epydoc.

DNS integration

• DNS Integration Design
• Dynamic updates with GSS-TSIG

389 Directory Server

• Schema Compatibility Plug-in Design

Default configurations for IPA components

• DNA plugin default configuration

IPA Server Reference Pages

• Schema Available in DS in IPA v1

User Interface Design

• Usability Testing Materials
• Usability Testing Results

Current progress

We initially began development of the new v2 components outside of our main repository. These have since been re-integrated for the server and the new client code will remain separate.

To checkout the code, use the git clone repository_url. Please note that these repositories changing rapidly and may not always be buildable.

IPA Server

The server using the new XML-RPC framework. This is the same repository as the V1 code. All work for V2 has been done in the master branch.

• Git repository: git://git.fedorahosted.org/git/freeipa.git

Test Repository

With the release of alpha 1 we have created a yum repository that contains the Fedora 11 x86 and x86_64 binaries. To use this repository retrieve the file:

freeipa-devel.repo

IPA Client

The client components.

SSSD:

• Git repository: git://git.fedorahosted.org/sssd.git

DNS integration

Dynamic loading of DLZ drivers

This is a patch allowing BIND to dynamically load DLZ drivers. Without the patch, drivers need to be compiled into BIND. We aim to get this feature upstream as soon as possible.

Code will be available soon.

IPA LDAP driver

Code will be available soon.

BIND DLZ write-back support patch

No code available at the moment.

Documentation

The documentation is still very much a work-in-progress. Here are some wiki pages outlining some of the newer capabilities. As time goes on these pages will be merged into the mainline IPA documentation.

• Command-Line tools overview
• NIS compatibility plugin
• Delegation
• Machine enrollment
• Certificate_Authority
• Command-line documentation requirements

• Installation and Deployment Guide

Covers installing the IPA server, validating the installation, and setting up replication.

• Reference Guide

Provides detailed information about IPA servers and clients, their supporting technologies, and the tools and services required to use and manage them.

• Client Configuration Guide

Describes how to download, install, and configure the IPA client software for each of the supported client platforms. Also covers the manual configuration of other platforms for which the IPA client software is not available.

• Administration Guide

Provides detailed information about how to customize and administer your IPA installation.

Developer Documentation

• Where and how SSL is used in IPA

Documentation Repository

• Git doc repository

The repository contains all of the XML and PNG files used to build the entire documentation set, using publican and DocBook XML.

More draft documentation will be available soon.