Analýza a nasazení opensource nástroje FreeIPA

Abstract

Tato praca je zamerana na nasadenie opensource nastroja FreeIPA. Rozobera moznosti nasadenia nastroja FreeIPA v single deployment a v skalovanom deployment. V praci je analyzovana problematika skalovatelnosti, vysokej dostupnosti, logovania, zalohovania a obnovy a zaroven praca ponuka riese- nia tychto problematik. Pretoze je znacna cast prace o konfiguracii, su v nej rozobrane zakladne principy Ansible, co je vhodna technologia poskytujuca jednoduchu automatizaciu a upravy pomocou konfiguracnych suborov. Dalsi ciel prace je analyza moznosti prepojenia s externym poskytovatelom sluzby OpenID Connect, ktora je casto vyuzivana na poskytovanie identit. Vysled- kom prace su funkcne konfiguracie pre spustenie nastroja FreeIPA s vysokou dostupnostou a skalovatelnostou a automatizovane operativne ulohy. Kon- figuracne skripty su jednoducho spravovatelne a spustitelne aj nie odborne znalym uzivatelom.

This thesis is focused on the deployment of opensource tool FreeIPA. It ana- lyzes options for deployment of FreeIPA in single deployment and also in multi-master deployment. Problems of scaling, high availability, logging, bac- kup and restore and also their proposed solutions are discussed. Since major part of thesis is about configuration, basic principles of Ansible are described, as this is suitable tool for configuration. Another goal is connecting FreeIPA with an external provider of Open ID Connect service, as this service is widely used for providing identities. The most important outcomes of this thesis are configration scripts for deployment of FreeIPA with high availability, scaling and automating operative tasks. Configuration scripts are easily manageable and can be run without professional knowledge of FreeIPA.