The FreeIPA team (https://launchpad.net/~freeipa) has been working with the goal to get the packages included in Debian and Ubuntu. Running an instance of FreeIPA provides an easy to maintain kerberos realm for users and machines, 'AD for Linux'. This is something that has been requested by administrators for years, so it's about time to provide it in Ubuntu as well, even if just as a technology preview and not something fully supported (=in universe). Even though the focus for the LTS is on stability, it shouldn't raise the bar for providing new funtionality in universe too high.

The current state of the packaging effort:

IPA client
- dependencies packaged
* certmonger
* python-krbv
* python-nss
- client packaged, testing ongoing [ref 1]

IPA server
- dependencies mostly packaged
* 389-ds
* dogtag missing
- server packaging shared with the client, currently disabled from building due to concentrating on getting the client running

Dogtag cert server
- dependencies packaged
* tomcatjss
- consists of several small components, some of them completed, more or less simple to package the rest, just not got that far yet

Ideally, the packages would flow from Debian, though it would mean getting someone to sponsor the uploads.

[1] https://www.redhat.com/archives/freeipa-devel/2011-September/msg00408.html