[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: User Administration (Forwarded message from Andreas Schuldei <andreas@schuldei.org>)

----- Forwarded message from Andreas Schuldei <andreas@schuldei.org> -----

Forwarded on request from Andreas.

| Date: Mon, 1 Nov 2004 13:48:59 +0100
| From: Andreas Schuldei <andreas@schuldei.org>
| Subject: Re: User Administration
| To: Runo Forrisdahl <runo@infostream.no>
| On Mon, Nov 01, 2004 at 10:46:11AM +0100, Runo Forrisdahl wrote:
| > How much work needs to be done to enable anyone in group admins to
| > create/delete/modify user(s)/group(s) and passwords?
| well, it is hard to estimate that time and work volume. are you
| interested in doing it? i would love to hear more from you.
| there are two ways i see just now.
| 1) with the present layout based on ldap
|    - you need to extend openldap ACLs to be able to operate both
|      based on posix-group membership *granting* the access and on
|      posix-group membership as a target for access. example:
|      members in the jradmina group (granting) are allowed to change
|      passwords for members in the teachers and students group
|      (target). (? weeks)
|    - then only some minor tweaks in the webmin-ldap-user-simple
|      module are needed. (1-2 days)
|    this option requires some insight into the inner working of
|    openldap. One would guess that it had been done allready had
|    it been easy. It should be possible, though.
| 2) with the future cerebrum backend and ldap as the directory
|    frontend, and webmin as the gui
|    - switch webmin-ldap-user-simple to use cerebrum as a backend.
|      (2-4 weeks)
|    - get the cerebrum package up to speed 3-5 weeks including
|      preconfiguration, a debian-edu profile with spreads etc,
|      (work in progress)
|    - get import and export filters written (uncertain, might take
|      only a week)
|    - provide an upgrade path from flat files (2 weeks?) or
|      present WLUS setup with data stored in ldap (4 weeks)
|    - more work which i am unaware of atm
|    this option is the one i pursue right now and that i would
|    recommened to consider more closely. see also
|    http://developer.skolelinux.no/~andreas/wishlist.txt
| > Are the admins and Jr. admins groups intended to preform these tasks?
| yes

----- End forwarded message -----

Runo Førrisdahl -
Infostream http://www.infostream.no/

Reply to: