General Approach

• Install FreeIPA Server

• Install ipa-client on each machine and enroll

• Service keytab/credentials cache

• Set up Service

• Test with command line tools

• Set up SSL

• Certmonger...