question Re: Status of FreeIPA support in Archives of Support Questions (Read Only)

Status of FreeIPA support

ArpitAgarwal — Fri, 16 Sep 2022 09:47:57 GMT

Do we officially support using HDP with FreeIPA and do any of our customers use FreeIPA to secure large clusters?

I found a workshop for FreeIPA+Kerberos integration with Sandbox 2.1.

Re: Status of FreeIPA support

nsabharwal — Thu, 05 Nov 2015 04:48:12 GMT

@Arpit Agarwal

There is no such support guide and as far as I know there is no official support guide for FreeIPA.

Re: Status of FreeIPA support

abajwa — Thu, 05 Nov 2015 04:56:22 GMT

We do have customers running kerborized HDP with IPA (with IPA support coming from RedHat) using the manual option of Ambari kerberos wizard. There is a JIRA logged for Ambari to officially support IPA as one of the options (as of Ambari 2.1.x the options are AD, MIT KDC and manual). The idea behind is for Ambari to help automate principal/keytab creation and distribution similar to how it does for AD/KDC. See https://issues.apache.org/jira/browse/AMBARI-6432 for more details

Re: Status of FreeIPA support

ArpitAgarwal — Thu, 05 Nov 2015 06:15:51 GMT

Thanks @Ali Bajwa. Would you know how to find out who are those customers? A large customer is experimenting with FreeIPA and wants to hear about others' experiences in the field.

Re: Status of FreeIPA support

abajwa — Thu, 05 Nov 2015 06:26:05 GMT

I would recommend asking this on internal channels (sme-security email list or hipchat channel). We can not discuss customers on public forums.

Re: Status of FreeIPA support

nsabharwal — Thu, 05 Nov 2015 08:43:50 GMT

@Arpit Agarwal @Ali Bajwa

As per my understanding, there is no official endorsement or certification approval. We know that HDP works with Microsoft AD/LDAP, MIT KDC and FreeIPA.

Adding Balaji in the thread.

@bganesan@hortonworks.com

Re: Status of FreeIPA support

nsabharwal — Tue, 24 Nov 2015 07:50:48 GMT

@Tim Hall