Info SID RID UID GID, compatibility Windows/UNIX with AD
Tivoli Directory Server or IBM Security Directory Server
Authentification for UNIX users in Active Directory (AD)
Authentification for UNIX users in FreeIPA
^ ^ 389 Directory Server ^ FreeIPA ^
| Use | General purpose | Single domain, focused on identity management |
| Flexibility | Highly-customizable | Limitations to focus on identity and authentication |
| Schema | Default LDAP schema | Optimized, special schema for identity management |
| Directory Tree | Standard and flexible hierarchy | Flat tree with a fixed hierarchy |
| Authentication | LDAP | Kerberos or Kerberos and LDAP |
| Active Directory Synchronization | Bi-directional | Unidirectional, Active Directory to FreeIPA |
| Password Policies | LDAP-based | Kerberos-based |
| User Tools | Java Console and standard LDAP utilities | Web-based UI and special Python command-line tools |