Jump to: navigation, search

Obsolete:IPAv3 Data Sharing Model

Revision as of 10:41, 15 August 2013 by Mkosek (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Obsolete Documentation

Please note that this content was marked as obsolete. We left the content here for study and archaeological purposes.

Please check our Documentation for a recent list of topics.


This document describes the high-level design of IPA and Samba integration. The integration is designed such that these applications represent a single domain/realm by sharing their data.

Shared Backend

IPA and Samba use a hierarchical data structure to store the data in their backend database. In LDAP terminology the structure is called Directory Information Tree (DIT). Both IPA and Samba can use 389 Directory Server (DS) as a backend.

In IPAv3, a single DS instance will be used to store both IPA DIT and Samba DIT and these DIT's will be synchronized.


The unified DIT is described in this page. The synchronization process is described in this page.

Shared Objects

Each DIT contains many objects, but only some of them need to be shared between these applications.

Shared objects include:

  • users
  • groups
  • hosts

Each shared object in one application will have a corresponding object in the other application representing the same entity. The objects are linked using the GUID.


The object mapping is described in this page.

Shared Attributes

Each object contains many attributes, but only some of them need to be shared between these applications.


The attribute mapping is described in these pages: