Hi, It has come a long way in 2 years, IMHO. It maybe a little fresh still for production in some ways, hence we will look at it and kick it tyres in a POC (proof of concept), but I have huge pressures to put something in. There are several aspects to consider, from our perspective our admin users are very...uh...diverse in their skill set so ease of use is a biggee as is phone support from someone like RH. Some swings and roundabouts will be evident but that's the same for all products. For instance comparing products, so far I've tried Sun's IdM, the gui wouldnt work, Sun's reply we dont know why, install it on solaris and come back....uh no thanks.... Oracle's IdM and in 6 weeks couldn't get it installed, Oracle wanted 30k for training, $300 and hour for support and $150k to install and set it up.....crazy money. I tried 389, complex early documentation (7.1 I think it was), no support though. RDS, not available in NZ. win2k3R2 AD, 4 days no workie, gave up. win2k8R2 AD, worked straight off, doesnt look like its got much management capability though. FreeIPA up and running in a few days.....lots of management. So, so far IPA is looking better than most of what I've looked at, say the top 3. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 8><------. > <snip> I last looked at FreeIPA about two years ago. It looked great but was still very, very immature. Is it ready for production yet? -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users