Re: More on the future LDAP admin gui in Debian Edu
Le Thursday 21 October 2010 17:55:45 Petter Reinholdtsen, vous avez
écrit :
> [Andreas B. Mundt]
>
> > What is the plan?
>
> Who do you expect to make this decision?
>
> > Almost since the beginning of this year we decide *not* to decide
> > anything at all concerning LDAP administration. I think this is fine
> > for some time, to see how things evolve.
>
> Given the lack of progress with alternatives cipux and lwat, and the
> fact that gosa is the only solution that is working thought it only
> partly solve our needs, I propose we decide that we drop lwat from
> squeeze, and bring gosa up to speed with our needs.
>
> For the specific LDAP setup, I believe we should change our Gosa setup
> to have a "flat" ldap directory (ie no students and teachers
> subtrees), and use the traditional three levels of administrative
> access (admin with full access, jr. admin with limited access and the
> rest with no special privileges.
>
> And if no-one else are ready to make the decision, I am happy to take
> it as the system architect of Debian Edu, but it require someone to
> actually implement the directory structure change and the access level
> change. With the flat structure and the three levels of access, we
> have not tied ourself too tight to gosa and should be able to migrate
> to other tools in the future, as well as making it possible for sites
> to use other tools if they want to.
>
> > As Petter already listed, we have 3 candidates: CipUX, GOsa and
> > lwat. (Or is there already another one approaching?)
>
> Given that cipux is not not present as a solution in Squeeze, lwat is
> broken and gosa is limping along, I believe we only have one realistic
> alternative - gosa. Not to happy with the home grown LDAP schemas
> gosa is using, but our hands seem tied and no sensible alternative
> have shown up this year.
>
> I expect us to have to maintain our own set of gosa packages in our
> own repository to get a version with support for netgroups and
> kerberos and the other things that are missing. I also hope we can
> get support for powerdns to avoid having to rewrite that part of the
> server setup.
Hello,
you don't need to have you own version of GOsa in your repository :) you
could just have plugins for your netgroups and the other things that are
missing. and if developped well enough to be generic for other people we
can even put them in the official GOsa releases :)
You just need php developpers and some help from the gosa project people
like me :)
Cheers
--
Benoit Mortier
CEO
OpenSides "logiciels libres pour entreprises" : http://www.opensides.eu/
Promouvoir et défendre le Logiciel Libre http://www.april.org/
Contributor to Gosa Project : http://gosa-project.org/
Reply to: