Slashdot Mirror

← Back to Domains

Domain: open-it.org

Stories and comments across the archive that link to open-it.org.

Comments · 6

  1. Re:Still waters by Lussarn · · Score: 1 · on Novell's Chris Stone at the MySQL Users Conference

    I use direcory administrator. I wouldn't say it's a wonderfull piece of software but it gets the work done.

  2. Evolution by curious.corn · · Score: 1 · on Moving Outlook/vCards to an LDAP Address Book?

    Evolution uses a strange schema type called evolutionPerson (google for it or check /usr/share/doc/evolution). In short it maps some datafields to regular organizationalPerosn while other fall in custom attributes. There are special directives to map attributes to other using something like regexps (help! I once read it on a long persentation... my HD is 30/37 GB full... no wait... haha! HERE!... it's in the LDAP section) so essentially you could manually map some fieldls to other to change the overall LDIF upon insertion. Otherwise just hack a script (in an ldif aware lang... say perl/php... ruby?) to parse the whacko entryes and reformat to your needs. In my little setup anyway Directory Administrator (linux gtk tool) is good enough for maintentance and except for system attributes (uid,guid,uname,etc...) I give users full self ACL rw perms. This way, users of Evo have to login/pw to access the Directory, and can use the whole dataset but edit/correct only their own account specifics. Enjoy... it's cool... beats M$ AD's 5c per transacion ;-)

  3. Re:I'm a river of knowledge to my people by jlittle · · Score: 1 · on LDAP Tools - Where are they?

    I better explain this.

    Directory Administrator is a user/group management tool for data stored in LDAP servers. Systems use nss_ldap and pam_ldap to access and authenticate against this information. Open-IT also provides packages for OpenLDAP and PADL software (nss/pam_ldap) to do this securely. You can even enable ACLs in OpenLDAP to limit exposure. Most people in this discussion are interested in user management tools, and don't want to be exposed fully to LDAP and its nomenclature.

  4. linux/unix LDAP user tools by Paul+Jakma · · Score: 4, Informative · on LDAP Tools - Where are they?

    checkout:


    directory_administrator which is a GNOME LDAP user admin tool (slick enough for use by a frontline helpdesk).

    there are other LDAP GUI's, KDE has one. search freshmeat.

    gq a general purpose LDAP GUI tool. quite slick, comes with RH7.x.

    Also, note that with RH7, the 'passwd' tool uses pam and will hence automatically work with LDAP authentication. (presuming your LDAP server is configured correctly for write access).

    finally, you'll probaby want to develop your own scripts with template LDIF's for things like useradd, or find someone who's already done so. (i noticed there's a post on this thread providing a link to exactly that.) Note that for scripting, PADL's migration scripts are very informative. These are included with the OpenLDAP distribution.

  5. I'm a river of knowledge to my people by foofboy · · Score: 5, Informative · on LDAP Tools - Where are they?

    Use it wisely

  6. What about "Directory Administrator"? by DocSnyder · · Score: 4, Informative · on LDAP Tools - Where are they?

    Directory Administrator is a GUI (GTK+) frontend for user administration within a LDAP directory. It still requires some knowledge about a LDAP hierarchy, but it helps a lot.

    My advice is to create two user hierarchies: one for administrative non-human accounts (e. g. root, mail, www) and one for real users. Same thing for groups. This way you can manage your real-user accounts with some kind of GUI frontend and even re-use the objects in an addressbook like Evolution Contacts without risking a security hole.