FreeIPA v2 (http://www.freeipa.org) could be used to replace (or supplement) the difficult-to-maintain FAS2 infrastructure. Some initial discussions have taken place on its viability, but it would be prudent to open the topic up at a regular meeting.
As an added benefit, the FreeIPA team is working with Yubico enable Kerberos in FreeIPA to acquire a ticket using a Yubikey one-time password.
This was discussed and decided to stick with FAS2 for now.
We could revisit down the road.
Login to comment on this ticket.