Hi,
What about discussing implementation after we choose a few roles?
I think FreeIPA has been mentioned before - it would make a good first
featured role, and I think it's also probably something to which one
would reasonably dedicate a machine. (As opposed to e.g. putting it
in a Docker)