[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: What Skolelinux want from Cerebrum

[ Petter Reinholdtsen ]

(Sorry for the delay. This is what you get for reading mail very late
or very early. I simply forgot all about it. Sorry.)

> Here are some notes on what we want Cerebrum to do in Skolelinux.
>  - import person info from school admin system / whatever
>  - generate accounts and update group membership automatically
>  - close down accounts and remove user data when the person quit

Ok. This is what Cerebrum does, so there shouldn't be any major
rewrites that has to be done.

>  - export user three to LDAP, usable by NSS-LDAP.
>  - export user filegroups and netgroups to LDAP, usable by NSS-LDAP.
>  - export automount maps of user disks to LDAP, usable by autofs
> (- export host netgroups, usable by NSS-LDAP.)

User- and person-trees: ok. I'm not sure about automount maps. A
Cerebrum-developer(Rune Frøysa) claims he has the essential part of
the infamous MREG[1] coded for Cerebrum. I guess we'll have to speak
to him.

>  - handle account locking
>  - allow teachers to change password on "their" pupils
>  - allow admins to change password on all users

bofhd[2] has a very strong and dynamic authorization-model. Privileges
are granted to persons which need them. I'm not sure if this is done
automagicly, but I don't see why it couldn't.

>  - handle printer quotas with CUPS

I don't know anything about printer-quotas and Cerebrum. I know there
is a printer-module in Cerebrum, but that's all. I'll ask around.

>  - allow teachers and admins to update quota info for pupils

No problem.

> This is a first draft. It is probably not complete, and should
> include more info on each point.

It is a first draft, indeed. :) We've spoken about slx and Cerebrum
several times, but never made a spec. This is a nice start.

[1] MREG is a ghost at the University of Oslo. Before Cerebrum, UoO
used a user-administration-system called UREG. MREG was supposed to
manage machine-related information as a module for UREG. It was never
finished and is now the equivalent of an urban-legend at UoO.

[2] BOFH is the frontend to Cerebrum. bofhd is the server. bofh the
client. No need to explain the acronym.

Mathias Meisfjordskar
GNU/Linux addict.

"If it works; HIT IT AGAIN!"

Reply to: