In accordance with the basic functionality related to user access management, there are two important things to understand:
- Identity: Generally, in Linux servers, we store the users locally. This means that every user, his password, and associate policy-related configuration are stored on local servers. This can be an ideal approach if you have fewer servers, but when the amount of servers grows, it becomes challenging to manage, especially when we want to add or remove users from a large fleet of servers. This is the reason why, in IPA, the users are stored on a central IPA server. IPA uses LDAP for storing data related to users and servers.
- Policy: Policy determines what the user is allowed to do. It states which ...