<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi,<br>
<br>
I have all done this, so from what you write I think IPA would be a good fit for what you want, except that is the single sign on bit I have not looked to see if that can be done. For http restart you control that via sudo in IPA so its centrally managed, I
have this working for one such server though I use the reload option instead. <br>
<br>
I would also not run one instance of IPA myself but with such a small site that's your call.<br>
<div><br>
<div style="font-family: Tahoma; font-size: 13px;">
<p>regards</p>
<p>Steven Jones</p>
<p>Technical Specialist - Linux RHCE</p>
<p>Victoria University, Wellington, NZ</p>
<p>0064 4 463 6272<br>
</p>
</div>
</div>
<div style="font-family: Times New Roman; color: rgb(0, 0, 0); font-size: 16px;">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF575508"><font color="#000000" face="Tahoma" size="2"><b>From:</b> freeipa-users-bounces@redhat.com [freeipa-users-bounces@redhat.com] on behalf of Bob Sauvage [Bob.sauvage@gmx.fr]<br>
<b>Sent:</b> Wednesday, 23 January 2013 9:51 a.m.<br>
<b>To:</b> freeipa-users@redhat.com<br>
<b>Subject:</b> [Freeipa-users] Some interrogations about the freeipa deployment<br>
</font><br>
</div>
<div></div>
<div><span style="font-family: Verdana;"><span style="font-size: 12px;">Hi *,<br>
<br>
I plan to review the network architecture of my office. 10 Windows/Linux desktops and 2 Linux servers will be deployed on the network.<br>
<br>
I want to install freeipa on the first server to act like an AD DS. I want to authenticate users on the server and controlling what can be done or not by them on the network. 10 other linux web servers should be accessible (console) by specific users and without
the need to authenticating again (single sign on). On these web servers, users can issue specific commands like "/etc/init.d/httpd restart".<br>
<br>
Is it possible to achive this with freeipa ? Do you have some articles ?<br>
<br>
Thanks in advance,<br>
<br>
Bob !</span></span> </div>
</div>
</div>
</body>
</html>