I’m a little frustrated that when I talk about manageability, people get confused. Manageability makes it simple for system administrators to deploy desktops and for users to share data.
This isn’t just about setting up servers. Ubuntu, based on Debian, is great as a server OS.
This isn’t just about automating tasks. Landscape or puppet can help out here, but that only goes so far. They’ll take care of monitoring, package updates, and automating tasks.
A sysadmin of an office or an IT group for a larger organisation still needs some central management interface for all his users. He needs to make it easy for people to share data across a network and have unified, secure credentials for login, email, and web access. If a user’s login account isn’t the same as their email account — if they can’t use the same address book in their desktop mail client as they do in webmail — then you have a management problem.
There is a known solution to this problem. Kerberize your apps and make them speak LDAP. Many applications already have this capability. The manageability problem that Ubuntu has is not really a lack of capability, it is one of integration. System and Network administrators tend to understand the problem better than developers of desktop or server software, but most of them already have their hands full managing their own organisation and don’t have time or, often, the capability to start integrating all the software and configuration into something that anyone can deploy easily.
And so, Microsoft continues to win on the desktop. Not because an individual PC running Windows is easier for most people to use, but because its easier to set up Active Directory to work with Outlook and Exchange than it is to roll your own directory service with the tools available out of the box on Ubuntu. Bug #1 will never be solved until directory services and authentication are integrated into every aspect of Ubuntu.
Now, as frustrated as I am that most people don’t seem to understand the problem when I talk about it, I am pleased to see that others are aware of the problem, and have actually put some effort into planning out an approach to solving it.
But they created this blueprint over four years ago and almost nothing has happened on it.
Launchpad is littered with similar blueprints (below) that show other people’s aborted efforts to solve part or all of the problem. Unfortunatly, no one group has really tried to spear-head this and so most of these efforts (at least when I did my survey a few months ago) are dead or dying.
I’d really like to get this problem solved so that setting up an Ubuntu-based directory service would be as easy — easier, even — as setting up Active Directory.
Look over the blueprints below, find a place you can help. Let’s get this moving forward!
- Turnkey identity management
- Identity management reference/test config
- Default LDAP DIT for user and group management
- implement simply DIT for Ubuntu server
- Make Ubuntu authenticate against Network Authentication services
- Single User Interface to Join and Participate in Microsoft Active Directory Domains
- Architecture of a directory infrastructure
- Enable user login to leverage a directory infrastructure
- Identity management and network authentication in Hardy
- Integrated Active Directory Logon
- 389 Directory Server Inclusion in Karmic
- Directory service included in Ubuntu Server
- Configuration of services to integrate with a directory
- Enable services to leverage a directory infrastructure
- Open Directory Service package
- Integrate OpenDS in Jaunty
- Search for a published printer in an Active Directory
- Easy active directory integration for EDUbuntu
- An integrated directory server for Ubuntu-server
- LDAP Integration
- Ubuntu Server MS Integration Proxies
- Seamless integration into a Windows domain environment (Active Directory)
- Make a LDAP Server as easy to install as a LAMP Server
- Managing the directory
- System Security Services Daemon for Ubuntu
- Make LDAP the default configuration backend for Ubuntu
- Create new tasksel tasks for common server use cases
- Free Identity Policy Audit infrastructure for Ubuntu as the freeipa.org project
- Authentication/Authorization/Access control/Accounting/Auditing services in the cloud
- Extend mail stack in Ubuntu-server