FreeIPA
Enterprise identity management: LDAP, Kerberos, PKI, DNS. The open-source domain controller with Active Directory trust.
About FreeIPA
FreeIPA is Red Hat's open-source identity management platform that provides centralized authentication, authorization, and account information for Linux and Unix environments. It combines LDAP directory services, MIT Kerberos for single sign-on, Dogtag Certificate Authority for PKI, BIND DNS server, and Sudo policy management into one integrated system.
FreeIPA offers a web-based management UI, command-line tools, and APIs for automation. It can establish cross-realm Kerberos trusts with Active Directory, allowing Linux systems to join Windows domains and Windows users to access Linux resources. It supports multi-master replication for high availability.
FreeIPA is the foundation of Red Hat Identity Management and is deployed in thousands of enterprise environments worldwide. It is GPL-licensed and actively maintained.
Key Features
- LDAP directory, MIT Kerberos KDC, and Dogtag PKI in one platform
- Active Directory trust: cross-realm Kerberos and user synchronization
- Centralized management of users, groups, hosts, services, and sudo rules
- Web UI, CLI, and API with multi-master replication
Self-Hosting Notes
Find another tool
More in Security & Identity
Authelia
Comprehensive single sign-on (SSO) and multi-factor authentication (MFA) portal.
Authentik
Flexible, open-source identity provider supporting SSO, MFA, and enterprise federation.
Canarytokens
Self-hosted honeypot tokens that alert you when accessed. Detect breaches, insider threats, and credential exposure.
CrowdSec
Modern, collaborative intrusion prevention system built to detect bad behaviors.