Centralised Identity Management with FreeIPA
Deployed FreeIPA to centralise user and host identity management, integrated with DNS.
Overview
User and host identities were managed inconsistently across systems, with no single source of truth for accounts, groups, or host-linked DNS records.
Problem
Without centralised identity management, account provisioning and revocation had to be handled per system, increasing administrative overhead and the risk of stale access.
Constraints
- Needed tight integration with existing DNS infrastructure
- Had to fit a Linux-based, self-hosted environment
Approach
Deployed FreeIPA as the central identity provider, integrating DNS and managing user and host lifecycle administration through it.
Key Decisions
Use FreeIPA instead of a commercial identity provider
Native integration with existing Linux and DNS infrastructure, without introducing a new external dependency.
Tech Stack
- FreeIPA
- Kerberos
- DNS
Result & Impact
Account and host lifecycle management moved from ad-hoc, per-system administration to a single, auditable source of truth.
Learnings
- Centralising identity early makes every subsequent automation project (DNS, certificates, secrets) easier to build on