F20 Self Contained Change: Transitive Trusts with Active Directory support for FreeIPA
= Proposed Self Contained Change: Transitive Trusts with Active Directory
support for FreeIPA =
https://fedoraproject.org/wiki/Changes/IPAv3TransitiveTrusts
Change owner(s): Matthias Clasen <mclasen(a)redhat.com> and the desktop SIG
FreeIPA will support transitive trusts with Active Directory
== Detailed description ==
FreeIPA in Fedora 19 already supports cross-realm trusts with Active
Directory. New version of FreeIPA will make possible to use FreeIPA identities
to access resources in Active Directory, for example, to log-on into Windows
workstations.
== Scope ==
This change requires expansion of logic in FreeIPA-provided database driver to
Kerberos KDC. Additionally, it requires development of Global Catalog Service
compatible with Active Directory. This is fairly isolated effort within
FreeIPA.
Other developers: no effect
Release engineering: N/A (not a System Wide Change)
Policies and guidelines: N/A (not a System Wide Change)