Re: More on the future LDAP admin gui in Debian Edu

[Petter Reinholdtsen <pere@hungry.com>]

[Andreas B. Mundt]
> What is the plan?

Who do you expect to make this decision?

> Almost since the beginning of this year we decide *not* to decide
> anything at all concerning LDAP administration. I think this is fine
> for some time, to see how things evolve.

Given the lack of progress with alternatives cipux and lwat, and the
fact that gosa is the only solution that is working thought it only
partly solve our needs, I propose we decide that we drop lwat from
squeeze, and bring gosa up to speed with our needs.

For the specific LDAP setup, I believe we should change our Gosa setup
to have a "flat" ldap directory (ie no students and teachers
subtrees), and use the traditional three levels of administrative
access (admin with full access, jr. admin with limited access and the
rest with no special privileges.

And if no-one else are ready to make the decision, I am happy to take
it as the system architect of Debian Edu, but it require someone to
actually implement the directory structure change and the access level
change.  With the flat structure and the three levels of access, we
have not tied ourself too tight to gosa and should be able to migrate
to other tools in the future, as well as making it possible for sites
to use other tools if they want to.

> As Petter already listed, we have 3 candidates: CipUX, GOsa and
> lwat. (Or is there already another one approaching?)

Given that cipux is not not present as a solution in Squeeze, lwat is
broken and gosa is limping along, I believe we only have one realistic
alternative - gosa.  Not to happy with the home grown LDAP schemas
gosa is using, but our hands seem tied and no sensible alternative
have shown up this year.

I expect us to have to maintain our own set of gosa packages in our
own repository to get a version with support for netgroups and
kerberos and the other things that are missing.  I also hope we can
get support for powerdns to avoid having to rewrite that part of the
server setup.

Happy hacking,
-- 
Petter Reinholdtsen