veyepar: Tutorial: Identity Management with FreeIPA

Author(s):	Fraser Tweedale
Location	D2.211
Date	feb Wed 03	Days Raw Files
Start	13:20	First Raw Start	13:21
Duration	1:40:00	Offset	0:01:54
End	15:00	Last Raw End	15:00
Chapters	00:00 0:13:40 0:17:46 0:17:52 0:18:45 0:24:38
Total cuts_time	27 min.

https://linux.conf.au/schedule/30130/view_talk
raw-playlist raw-mp4-playlist encoded-files-playlist host archive tweet mp4 svg png

assets release.pdf Tutorial_Identity_Management_with_FreeIPA.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

FreeIPA is an integrated identity management solution providing
centralised user, host and service management, authentication and 
authorisation in Linux/UNIX networked environments, with a focus on
ease of deployment and management.  It is built on top of well-known
Open Source technologies and standards including 389 Directory
Server, MIT Kerberos and Dogtag Certificate System.

This hand-on workshop will provide participants with a comprehensive
introduction to FreeIPA including server deployment and
administration, client machine enrolment, and configuring server
software to use FreeIPA's centralised identity and policy store.

Participants will:

- Install a FreeIPA server and replica
- Enrol client machines in the domain
- Create and administer users
- Manage host-based access control (HBAC) policies
- Issue X.509 certificates for network services
- Configure a web server to use FreeIPA for user authentication and
  access control

There will be a number of elective units which participants can
choose, based on their progress and particular use cases:

- OTP two-factor authentication
- Advanced certificate management: profiles, sub-CAs and user
  certificates
- OpenSSH key management
- Federated identity with Ipsilon
- User self-service secret management
- ...and more!

If you are planning to attend the workshop please note that *some preparation is strongly advised*.

Preparation steps are outlined at
https://github.com/freeipa/freeipa-workshop#preparation.

In brief, it amounts to "install Vagrant and VirtualBox, and download the VM image" so that you are ready to ``vagrant up`` at the start of the workshop.  The `libvirt' provider is also supported.

Comment:

production notes