LDAP todo about hackspace-foundation-sites HOT 6 CLOSED

when delopying as e.g. pam ldap we need to be sure that local users (in /etc/passwd) override whats in ldap.

from hackspace-foundation-sites.

maybe make uid = lhsid + 2000? are lhs member id's secret?

also a bug:

gecos is being set to "System User"

from hackspace-foundation-sites.

Member IDs aren't secret, so that sounds fine.

from hackspace-foundation-sites.

• add shell support, need at least: [done]

/bin/bash
/bin/sh
/bin/zsh

• hack up the smbldap tools a little more so they don't check for root (or only check that they can read /etc/smbldap-tools/smbldap_bind.conf) [done]
• make an ldap-admins group that can read /etc/smbldap-tools/smbldap_bind.conf [done, but not on turing yet]
• let www-data sudo to that group to run the smbldap-tool scripts [done]
• add russss to that group for the reconcile script [needs to be done on turing]

from hackspace-foundation-sites.

If we're going to have a ticketing system with LDAP for user auth we're going to need to get email addresses from LDAP for each user.

Looks like the "mail:" attribute is the right one.

from hackspace-foundation-sites.

enough ldap for the moment

from hackspace-foundation-sites.