Fwd: Re: [Ldap-users-devel] TODO/wish list

[Wil C. <wc...@na...>]

Also Sprach Fernando Lozano:

> If webmin runs on the mail/personal web server there's no problem. But 
> as I said, I know no webmin feature to create a remote home dir. Webmin 
> is a host administraion tool, not yet a network admin tool. But maybe I 
> am just outdated... :-)  I agree with you that this would not pose a 
> security risk.

Hm, I haven't looked deeply into the capabilities of Webmin; only
inferred from the "Webmin Servers Index" that it could communicate
with other Webmin servers.  Today is a holiday in the US, and I'll
probably be in trouble with my girlfriend if I spend much more time
on my computer ;) but when I get the chance I'll look into the API.

Perhaps all it does is allow you to switch easily to other servers.

> There's a notification API the standard Users and Groups Module may call
> other modules when a user/goup is created, modified or deleted. This way
> the samba module can keed the smbpassword in sync. I do not implement
> this API yet, and I am investigaring if my module could send the
> notifications instead of just receiving them.

That would be cool.

> The best thing would be to configure samba to use LDAP instead of its 
> own files. This is supported since 2.1 I guess.

Yeah, according to my friend who sponsored the re-write of the Samba
code for this, the support in 2.2.2 is *considerably* better than
in previous versions.  I'll d/l the source when I get time and take
a look at the schema.

> Certain Outlook atributes are refused by Openldap 2.x. I guess this is
> simply because they are not on the schema. I added a configure option to
> disable them so you can use the module for Unix user administration. It
> takes a long time to check each attribute and find its object class
> (Microsoft not allways use the RFC standard schemas, as samba 2.2.1
> docs state) and that's why I implemented a workaround. Openldap 1.0.x
> is not strict about schemas, that's why it worked before.

Ah, I see.  I'm sure it's just a matter of finding the right schemas
to install, in that case.


Wil
-- 
W. Reilly Cooley                           wc...@na...
Naked Ape Consulting                        http://nakedape.cc
irc.linux.com                             #orlug,#pdxlug,#lnxs

The penalty for laughing in a courtroom is six months in jail; if it
were not for this penalty, the jury would never hear the evidence.
		-- H. L. Mencken