V3_Designs

V3.0 Feature Designs

• Ad Trusts

• ID Ranges

• DNS SOA serial auto-incrementation

• SELinux User Mapping

• CA subsystem certificate renewal

V3.1 Feature Designs

• Certificate Find Command

V3.2 Feature Designs

• Minor enhancements

• Web UI: Keyboard confirmation of dialogs

• Messages

• Logging and output in install & management commands

• Better help organization

• Web UI: Enable gzip compression on httpd

• Web UI: AMD modules and Web UI build

• Add support for RFC 6594 SSHFP DNS records

• Redesign the LDAP code

• AD Trust Configuration commands (trustconfig)

• Configurable SID blacklists for AD trusts

• Integrated OTP based 2FA with internally and externally managed tokens

• Commands to manage the list of IPA realm domains

• Drop CSV parsing in CLI arguments

• New re-enrollment method - Client install using keytab

• Filtering groups by type

• Web UI plugins

• Kerberos Flags - New LDAP attributes to store Kerberos flags

• Drop –selfsign & Drop selfsign functionality - Drop ipa-server-install’s “selfsign” mode

• CA-less install - Install without an embedded CA, with custom SSL certs

• Deprecation of HBAC source hosts

• Backup and Restore

• DNS realmdomains integration

• Prompt for DNS at install time

• Read and use per service PACtype

• Web UI: extensible navigation

• Single OCSP and CRL URIs in certificates

• Integration with a provisioning system - Design of the changes need for integration with a provisioning system.

• Recover DNA Ranges in replica management

• Trust resolve command

V3.3 Feature Designs

• Serving legacy clients for trusts

• Use POSIX attributes defined in AD

• Integration testing framework

• ipa-server-certinstall CLI cleanup

• Transitive Trusts

Internal Changes

• Refactorings - Completed infrastructure improvements in V3

---

Useful links

• Design page template

• V3.x design proposals