Flock 2019 has ended
This is a draft schedule! Please create a personal schedule noting which sessions you will attend. We will use this information to create a final overall schedule.
Back To Schedule
Friday, August 9 • 14:00 - 14:50
State of authentication and identity management in Fedora

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Fedora Project is often seen as a leading test bed for identity management, thanks to its close relationship with FreeIPA, SSSD, and other projects. However, we rarely talk about goals and use cases these projects are trying to solve within Fedora distributions' context. Changes happen almost in every Fedora release: authconfig replaced by authselect, SSSD providing a new Kerberos credentials cache storage, smartcards support being added and a multitude of other changes came in with FreeIPA or Samba refreshes. Still, use of new features is somewhat limited by a relative complexity of detecting and setting up actual environments.

With the addition of Fedora Silverblue, many classic desktop integration methods that are backed by FreeIPA, Samba and SSSD tools would need to be re-thought to fit immutable containerised environments.
There is also an industry-wide effort to reduce use of insecure versions of various network protocols. While there is a good progress with protocols like TLS and common security policies, ease of use for desktop users directly clashes with these activities and we need to look into how both user experience and security could be improved.

The talk is going to provide a Fedora-wide overview of the work being done by multiple teams to improve identity and authentication packaging infrastructure within Fedora projects, how individual components play together and what to expect in future.

  • Fedora users and system administrators
  • Silverblue developers
  • Fedora QE
  • Fedora Server

avatar for Alexander Bokovoy

Alexander Bokovoy

Sr. Principal Software Engineer, Red Hat
Sr. Principal Software Engineer at Red Hat, working on security and identity management. Actively participates in FreeIPA, SSSD, Samba, and many other free software projects targeting an open source enterprise environments.

Friday August 9, 2019 14:00 - 14:50
Uranus (112m² / 40 people) Budapest, Kárpát utca 62-64, 1133 Hungary
  • Talk Length 50

Attendees (7)