<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 10/04/2011 06:23 PM, Dmitri Pal wrote:
<blockquote cite="mid:4E8B8769.40306@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
On 10/04/2011 06:42 AM, <a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:Duncan.Innes@virginmoney.com">Duncan.Innes@virginmoney.com</a>
wrote:
<blockquote
cite="mid:OF807B38C3.20669616-ON8025791F.003ABFE6-8025791F.003AC9D2@virginmoney.com"
type="cite"><font size="2" face="sans-serif">Hi,</font> <br>
<br>
<font size="2" face="sans-serif">Is there any chance someone
could do a quick update to the Roadmap? I can see from the
devel mailing list that there's lots of work going on, but I'm
not able to decipher a higher level direction in which things
are going.</font> <br>
<br>
</blockquote>
<br>
= 3.0 Plans =<br>
<br>
* Beta by Christmas break<br>
* Release Feb-Mar – 2012<br>
* Release is time driven <br>
* Content:<br>
Cross Kerberos Trusts - Milestones start with "3.0 Trust" <br>
Core IPA enhancements - Milestones start with "3.0 Core"<br>
* Project is run is following month aligned sprints <br>
<br>
== Cross Kerberos Trusts ==<br>
<br>
* Reasons: <br>
Support of mixed AD <-> IPA deployments<br>
Support of multiple IPA domains <br>
* Use cases:<br>
User is in AD; service is in IPA; user logs in against AD,
gets ticket and then accesses IPA service.<br>
Same as above but IPA service then in tern needs to access
other service on behalf of user (TGT forwarding)<br>
Same as above but IPA to IPA<br>
Authenticated AD user logs with SSO into Linux machine that is
a part of IPA domain in the cloud over SSH.<br>
Etc.<br>
<br>
</blockquote>
I also created reports to easily select the relevant tickets.<br>
This one for trust work<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/report/20">https://fedorahosted.org/freeipa/report/20</a><br>
<br>
<blockquote cite="mid:4E8B8769.40306@redhat.com" type="cite"> ==
Themes of the core 3.0 enhancements ==<br>
<br>
* Support SELinux central management<br>
* Support SSH user key management<br>
* Add additional standard maps<br>
* UI enhancements and improvements<br>
* DNS improvements and better IP data handling<br>
* Performance of the admin interface<br>
</blockquote>
<br>
And this one for core effort<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/report/21">https://fedorahosted.org/freeipa/report/21</a><br>
<br>
<blockquote cite="mid:4E8B8769.40306@redhat.com" type="cite"> <br>
= Beyond 3.0 =<br>
<br>
* Over trust use cases<br>
* Key management<br>
* User certificate management<br>
* SAML, OpenID, Oauth provider<br>
* External authentication integration (OTP)<br>
* Level of assurance <br>
* RADIUS<br>
<br>
<blockquote
cite="mid:OF807B38C3.20669616-ON8025791F.003ABFE6-8025791F.003AC9D2@virginmoney.com"
type="cite"><font size="2" face="sans-serif">An updated roadmap
would help understand the direction of the project.</font> <br>
<br>
<font size="2" face="sans-serif">Many thanks</font> <br>
<br>
<font size="2" face="sans-serif">Duncan</font> <br clear="both">
This e-mail is intended to be confidential to the recipient. If
you receive a copy in error, please inform the sender and then
delete this message. Virgin Money do not accept responsibility
for changes made to any e-mail after sending. Virgin Money have
swept, and believe this e-mail to be free of viruses and
profanity but make no guarantees to this effect.<br>
<br>
Virgin Money Personal Financial Service Ltd is authorised and
regulated by the Financial Services Authority. Registered in
England no. 3072766. Entered on the Financial Services
Authority's Register <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.fsa.gov.uk/register/">http://www.fsa.gov.uk/register/</a>.
Register Number 179271. <br>
<br>
The Virgin Deposit Account and the Virgin Cash ISA are both
personal deposit accounts with Virgin Bank Ltd administered by
Virgin Money Personal Financial Service Ltd. Virgin Bank Ltd is
authorised and regulated by the Financial Services Authority.
Registered in England no. 980698. Entered on the Financial
Services Authority's Register <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.fsa.gov.uk/register/">http://www.fsa.gov.uk/register/</a>.
Register Number 204459. <br>
<br>
Virgin Money Unit Trust Managers Ltd is authorised and regulated
by the Financial Services Authority. Registered in England no.
3000482. Entered on the Financial Services Authority's Register.
Register Number 171748.<br>
<br>
Virgin Money Ltd. Registered in England no. 4232392. Introducer
appointed representative only of Virgin Money Personal Financial
Service Ltd.<br>
<br>
Virgin Money Management Services Ltd. Registered in England
no.3072772.<br>
<br>
Virgin Money Holdings (UK) Limited. Registered in England
no.3087587.<br>
<br>
All the above companies have their Registered office at
Discovery House, Whiting Road, Norwich NR4 6EJ. <br>
<br>
All products are open only to residents of the United Kingdom.<br>
<br>
This message has been checked for viruses and spam by the Virgin
Money email scanning system powered by Messagelabs.<br>
<pre wrap=""><fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>