You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Timo Aaltonen d56fd209dc Add new files for the server 1 month ago
.copr Adding auto COPR builds 1 year ago
.github Let GH auto-notify and auto-close stale PRs 1 year ago
asn1 fix minor spelling mistakes 4 years ago
client ipa-getkeytab: fix compiler warnings 2 months ago
contrib Parse the debugging cache log to determine the read savings 5 months ago
daemons ds: Support renaming of a replication plugin in 389-ds 4 months ago
debian Add new files for the server 1 month ago
doc Redesign subid feature 3 months ago
init systemd: enforce en_US.UTF-8 locale in systemd units 10 months ago
install Clean up the PKI securitydomain when removing a server 2 months ago
ipaclient Provide more information in ipa-certupdate on ccache failure 2 months ago
ipalib ipatests: test_installation: move tracking_reqs dependency to ipalib constants ipaserver: krainstance: utilize moved tracking_reqs dependency 3 months ago
ipaplatform rhel platform: add a named crypto-policy support 3 months ago
ipapython Parse cert chain as JSON not XML 2 months ago
ipaserver Only call add_agent_to_security_domain_admins() when CA is installed 2 months ago
ipasphinx Create ipasphinx package for Sphinx plugins 1 year ago
ipatests ipatests: Verify that securitydomain is updated on server-del 2 months ago
po po/uk.po: Update translations to FreeIPA ipa-4-9 state 4 months ago
pypi Cleanup shebang and executable bit 3 years ago
selinux selinux: modify policy to allow one-way trust 9 months ago
util ipa_pwd: Remove unnecessary conditional 9 months ago
.freeipa-pr-ci.yaml Making nigthly test definition editable by FreeIPA's contributors 3 years ago
.git-commit-template git-commit-template: update ticket url to use instead of 4 years ago
.gitignore Add basic support for subordinate user/group ids 3 months ago
.lgtm.yml Fix lgtm file classification 7 months ago
.mailmap mailmap: add ftweedal 11 months ago tox: Don't expand symlinks 1 year ago Constrain pylint to supported versions 5 months ago
ACI.txt Redesign subid feature 3 months ago
API.txt Redesign subid feature 3 months ago
BUILD.txt Bootstrap Sphinx documentation 1 year ago Changing Django's CoC to reflect FreeIPA CoC 3 years ago
COPYING Change FreeIPA license to GPLv3+ 11 years ago
COPYING.openssl Add a clear OpenSSL exception. 6 years ago
Contributors.txt Update list of contributors 2 months ago Add basic support for subordinate user/group ids 3 months ago Add PYTHON_INSTALL_EXTRA_OPTIONS and --install-layout=deb 4 years ago ipa-scripts: fix all ipa command line scripts to operate with -I 2 years ago Update IRC links to point to 4 months ago
VERSION.m4 Become IPA 4.9.7 2 months ago build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 11 years ago ipa-getkeytab: add option to discover servers using DNS SRV 2 months ago
freeipa.doap.rdf Adding modified DOAP file 3 years ago remove python3-pexpect from Requires 2 months ago Replace PYTHONSHEBANG with valid shebang 2 years ago Address inconsistent-return-statements 2 years ago
make-doc Make an ipa-tests package 8 years ago
make-test Use pytest and drop pytest.ini 4 years ago Replace PYTHONSHEBANG with valid shebang 2 years ago Replace PYTHONSHEBANG with valid shebang 2 years ago Fix unnecessary usrmerge assumptions 2 years ago pylint: Adapt to new Pylint 2.8 6 months ago
pylintrc pylint: Adapt to new Pylint 2.8 6 months ago
server.m4 extdom-extop: refactor tests to use unshare+chroot to override nss_files configuration 1 year ago
tox.ini pytest: Show extra summary information for all except passed tests 5 months ago

FreeIPA Server

FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

FreeIPA can seamlessly integrate into an Active Directory environment via cross-realm Kerberos trust or user synchronization.



  • Allows all your users to access all the machines with the same credentials and security settings
  • Allows users to access personal files transparently from any machine in an authenticated and secure way
  • Uses an advanced grouping mechanism to restrict network access to services and files only to specific users
  • Allows central management of security mechanisms like passwords, SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  • Enables delegation of selected administrative tasks to other power users
  • Integrates into Active Directory environments


The FreeIPA project provides unified installation and management tools for the following components:

Project Website

Releases, announcements and other information can be found on the IPA server project page at .


The most up-to-date documentation can be found at .

Quick Start

To get started quickly, start here:

For developers


Please see the file called COPYING.