F20 Self Contained Change: Transitive Trusts with Active Directory support for FreeIPA

[Jaroslav Reznik]

= Proposed Self Contained Change: Transitive Trusts with Active Directory 
support for FreeIPA =
https://fedoraproject.org/wiki/Changes/IPAv3TransitiveTrusts

Change owner(s): Matthias Clasen <mclasen(a)redhat.com&gt; and the desktop SIG 

FreeIPA will support transitive trusts with Active Directory 

== Detailed description ==
FreeIPA in Fedora 19 already supports cross-realm trusts with Active 
Directory. New version of FreeIPA will make possible to use FreeIPA identities 
to access resources in Active Directory, for example, to log-on into Windows 
workstations. 

== Scope ==
This change requires expansion of logic in FreeIPA-provided database driver to 
Kerberos KDC. Additionally, it requires development of Global Catalog Service 
compatible with Active Directory. This is fairly isolated effort within 
FreeIPA.

Other developers: no effect 
Release engineering: N/A (not a System Wide Change) 
Policies and guidelines: N/A (not a System Wide Change)