# FreeIPA

14 Hacker News commenters recommended FreeIPA and 7 criticized it, November 2025 to November 2026. It was recommended in 4 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Free, open source identity management that can manage Linux and Windows clients, with a Red Hat version available. Critics find it complex to configure and maintain.

## Why people recommend it

- Alternative to Active Directory-style management (3 comments): "It does, it's called FreeIPA (or RedHat IdM). The only GPO parts it doesn't do are those that are not related to policy in the IAM sense" ([source](https://news.ycombinator.com/item?id=47717227)) "If you are looking for an out-of-the-box tool that can manage both Linux and Windows clients, Red Hat has FreeIPA." ([source](https://news.ycombinator.com/item?id=47717730)) "Univention Nubus (Keycloak + OpenLDAP) or FreeIPA as alternatives for Entra come to mind." ([source](https://news.ycombinator.com/item?id=47150506))
- Praised as excellent, working software (2 comments): "Those are both excellent pieces of software we are lucky to have." ([source](https://news.ycombinator.com/item?id=46599284)) "It does, now running. Glad to be able to replace my Samba4 setup" ([source](https://news.ycombinator.com/item?id=47113510))
- Point-and-click UI, easier to debug (2 comments): "If you want point-and-click/drool interfaces, use FreeIPA." ([source](https://news.ycombinator.com/item?id=47718713)) "its infinitely easier to debug" ([source](https://news.ycombinator.com/item?id=47061500))

## What people warn about

- Complex, byzantine design (2 comments): "The freeipa/sssd/nss/pam/krb/ldap/dns (+keycloak/samba/...) etc stack is just incredibly byzantine" ([source](https://news.ycombinator.com/item?id=47060635)) "The byzantine and overly complex nature of FreeIPA is a feature not a bug." ([source](https://news.ycombinator.com/item?id=47070272))
- Hard to configure and maintain (2 comments): "all were more trouble to configure than they were worth" ([source](https://news.ycombinator.com/item?id=47065330)) "FreeIPA in particular is a beast to maintain" ([source](https://news.ycombinator.com/item?id=47157540))

## Alternatives hackers recommend

- [Keycloak](https://hackerapproved.com/p/keycloak.md): 44 recommend
- [Authentik](https://hackerapproved.com/p/authentik.md): 14 recommend
- [Okta](https://hackerapproved.com/p/okta.md): 11 recommend
- [Microsoft Entra](https://hackerapproved.com/p/microsoft-entra.md): 8 recommend
- [Ory](https://hackerapproved.com/p/ory.md): 8 recommend

## Cite as

Hacker Approved, "FreeIPA", https://hackerapproved.com/p/freeipa/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).