configuring gosa during system installation
Hi,
many thanks for all the answers and hints so far! I will reply to them
soon, but first a technical question that just came up when I
excitedly started to make a first draft implementation:
To avoid having the user to click through the gosa builtin
"configurator" after installing the system, it would be nice to
prepare gosa already during system installation of our main-server.
The idea is to prepare a gosa.ldif which contains all needed to start
(dropped into ldap) in combination with the coresponding configuration
gosa.config.
In gosa.config, timezone and language have to be modified during
install, as well as ldap and gosa-admin password(-hashes).
For the ldap tree, I guess most parts are straight forward, but how
can I create the gosaAclEntry? I suspect it has to correspond to the
gosa-admin (called ldapadmin below). Below you find a draft
ldif. $ROOTPW is replaced by the password hash during installation.
Regards,
Andi
dc=skole,dc=skolelinux,dc=no
dc: skole
o: skole.skolelinux.no
ou: skole
description: skole
objectClass: gosaAcl
objectClass: top
objectClass: dcObject
objectClass: organization
objectClass: gosaDepartment
gosaAclEntry: 0:psub:Y249U3lzdGVtIEFkbWluaXN0cmF0b3ItbGRhcGFkbWluLG91PXBlb3BsZSxkYz1za29sZSxkYz1za29sZWxpbnV4LGRjPW5v:all;cmdrw
## ^^^^^^^^^^^^^^^^^^^^ ????????????? ^^^^^^^^^^^^^^^^^^^^^
## gosa-admin:
uid=ldapadmin,ou=people,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: person
objectClass: gosaAccount
objectClass: organizationalPerson
objectClass: inetOrgPerson
givenName: System
sn: Administrator
cn: System Administrator-ldapadmin
uid: ldapadmin
userPassword: {crypt}$ROOTPW
###################### students #########################
## predefine template newstudent:
uid=newstudent,ou=people,ou=Students,dc=skole,dc=skolelinux,dc=no
sn: NewStudent
givenName: NewStudent
uid: newstudent
cn: NewStudent NewStudent
userPassword: {crypt}
homeDirectory: /skole/tjener/home0/%uid
loginShell: /bin/bash
uidNumber: 1000
gidNumber: 1000
gecos: NewStudent NewStudent
shadowLastChange: 14737
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: gosaUserTemplate
objectClass: posixAccount
objectClass: shadowAccount
objectClass: gosaAdministrativeUnitTag
gosaUnitTag: 1273308526072077400
cn=newstudent,ou=groups,ou=Students,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: gosaAdministrativeUnitTag
cn: newstudent
description: Group of user newstudent newstudent
gidNumber: 1000
gosaUnitTag: 1273308526072077400
###################### teachers #########################
## predefine template newteacher:
uid=newteacher,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no
sn: NewTeacher
givenName: NewTeacher
uid: newteacher
cn: NewTeacher NewTeacher
userPassword: {crypt}
homeDirectory: /skole/tjener/home0/%uid
loginShell: /bin/bash
uidNumber: 1000
gidNumber: 1000
gecos: NewTeacher NewTeacher
shadowLastChange: 14737
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: gosaUserTemplate
objectClass: posixAccount
objectClass: shadowAccount
objectClass: gosaAdministrativeUnitTag
gosaUnitTag: 1273308526072077400
cn=newteacher,ou=groups,ou=Teachers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: gosaAdministrativeUnitTag
cn: newteacher
description: Group of user newteacher newteacher
gidNumber: 1000
gosaUnitTag: 1273308526072077400
########################################################
########################################################
Reply to: