FreeIPA

Open-source identity management for Linux users and hosts, combining LDAP, Kerberos, DNS and certificates.

FreeOpen sourceLinuxWebSelf-hostedCommand line
Official websitefreeipa.orgDownload pagefreeipa.orgDocumentationfreeipa.org

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About FreeIPA

FreeIPA manages Linux users and client hosts in a realm from one central place, through a command line, a web interface or an RPC API. It combines 389 Directory Server, MIT Kerberos, DNS, the Dogtag certificate system and SSSD, and provides single sign-on across systems and services.

Administrators can define Kerberos authentication and authorisation policies, control sudo, SELinux and autofs rules, and set up trusts with Microsoft Active Directory. Multi-master replication gives redundancy. It suits organisations running Linux fleets that need centralised identity.

Strengths

  • Integrates LDAP, Kerberos, DNS and certificates in one system
  • Trusts with Microsoft Active Directory
  • Multi-master replication
  • CLI, web UI and JSON-RPC API

Limitations

  • Linux-centric; built around Fedora and related distributions
  • Many integrated components make it heavy to deploy and operate

Details

Pricing
FreeFree and open source.
License
Open source, license not stated
Developer
The FreeIPA contributors
Platforms
Linux, Web, Self-hosted, Command line
How it runs
Self-hosted
Account
Not required
Best suited for
Organisations centralising identity and policy for Linux servers and workstations
Last verified
Added
Provenance
Facts checked against the developer's own pages and store listings, 1 sources on file.

Alternatives to FreeIPA

Compare all

Software that can replace FreeIPA for an important use case, and what changes if you switch.

  • Univention Corporate Server

    A Linux-based server system providing open-source identity and access management for on-premises networks.

    FreemiumOpen sourceLinuxSelf-hosted

    Univention Corporate Server is a full Linux server OS for on-premises identity management, shipped as VM images and aimed at schools, public bodies and companies.

  • Samba

    Open-source SMB file and print server that can also run as an Active Directory domain controller.

    FreeOpen sourceLinuxSelf-hosted

    Samba can run as an Active Directory domain controller on Linux, also serving files and printers, though AD role configuration can be complex.

  • Zentyal

    An Ubuntu-based Linux server with Active Directory compatibility, mail and network services for small offices.

    PaidProprietaryLinuxSelf-hosted

    Zentyal is a paid Ubuntu-based server with an Active Directory compatible domain controller, mail and network services for small offices.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm is a lighter open-source identity server offering OAuth2, LDAP, passkeys and Unix login integration, with a smaller ecosystem.

  • JumpCloud

    A cloud directory platform for managing user identities, access and devices across several operating systems.

    PaidProprietaryWindowsmacOSLinuxAndroidWeb

    JumpCloud is a paid hosted directory with identity and device management, SSO, MFA and RADIUS, removing the need to run your own servers.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

    Microsoft Entra ID is a paid cloud directory with single sign-on, removing self-hosting but tying identity to Microsoft's platform.

  • OpenLDAP

    Open-source implementation of LDAP, with a directory server, a load balancer, client libraries and tools.

    FreeOpen sourceLinuxSelf-hostedCommand line

    OpenLDAP is a standards-based open-source LDAP server without Kerberos, DNS or certificates integrated, and with no graphical management interface.

FreeIPA as an alternative

Listings that name FreeIPA as an alternative.

  • 389 Directory Server

    An open-source LDAP directory server for Linux with multi-supplier replication.

    FreeOpen sourceLinuxSelf-hosted

    FreeIPA wraps an LDAP directory with Kerberos, DNS and certificates plus a web UI and Active Directory trusts, at the cost of a heavier deployment.

  • LLDAP

    A lightweight LDAP server for managing users and groups through a simple web interface.

    FreeOpen sourceLinuxSelf-hosted

    FreeIPA combines LDAP with Kerberos, DNS and certificates and supports Active Directory trusts, but is much heavier to deploy and operate than LLDAP.

Similar software

Related functionality, not necessarily a direct replacement.

Report a wrong fact or a dead link on this listing