Authentication Server

We're looking to use FreeIPA (http://www.freeipa.org/page/Main_Page) for an authentication store within the space.

To do list

Here's a list of things that need to still be done before we put it into production.

• Install in a VM Done
• Get properly backed up Done
• Get our PEM from IANA, (request submitted March 9 2014) Done
• Extend the LDAP schema to hold additional member information (CRM ID, join date, ID card number, key number, etc)
• Set up CA and such Done
• Set up VPN link between sshc0 and the space (this depends on the CA being set up properly)
• Migrate user data from 389 on sshc0 to FreeIPA
• Enroll all existing systems in it
• Document adding users
• Document enrolling systems Done