Hi,

What about discussing implementation after we choose a few roles? 

I think FreeIPA has been mentioned before - it would make a good first featured role, and I think it's also probably something to which one would reasonably dedicate a machine.   (As opposed to e.g. putting it in a Docker)