Re: [webmin-l] auto entering attributes LDAP_Useradmin

[Jamie C. <jca...@we...>]

On 7/Oct/2006 22:49 Craig White wrote ..
> On Sat, 2006-10-07 at 21:40 -0700, Jamie Cameron wrote:
> > On 7/Oct/2006 19:46 Craig White wrote ..
> > > I'm having an issue auto entering attributes in LDAP Useradmin when
> > > creating new users - these auto entries simply aren't created though
> the
> > > objectclass 'apple-user' is added and other samba attributes get
> > > automatically entered. Also, if I manually add these entries below
> > > (longhand - no ${USER} ), the entries are created.
> > > 
> > > 1 - apple-user-homeDirectory, values typically look like
> > > 
> > >    /Network/Servers/srv1.example.com/NetUsers/administrator
> > > 
> > > so my auto enter looks like
> > > 
> > > apple-user-homeDirectory /Network/Servers/srv1.example.com/NetUsers/${USER}
> > > 
> > > 2 - apple-user-homeurl, values typically look like
> > > 
> > > 
> > > <home_dir><url>afp://srv1.example.com/NetUsers/</url><path>administrator</path></home_dir>
> > > 
> > > (actually, it appears that these values are Base64 encoded when saved
> in
> > > DSA)
> > > 
> > > so my auto enter looks like
> > > 
> > > <home_dir><url>afp://srv1.example.com/NetUsers/</url><path>${USER}</path></home_dir>
> > > 
> > > so it leaves me wondering if I somehow need to escape these auto entries
> > > so they process properly in your perl scripts.
> > > 
> > > Suggestions?
> > 
> > Is ${USER} a substitution done by the LDAP server, or by Webmin? Normally
> when you
> > specific an extra LDAP attribute like ${SOMETHING}, it will be replaced
> when the user
> > is saved with some attribute of the new user..
> ----
> ${USER} is something I have only used in webmin ldap_useradmin config so
> that it replaces that token with the actual 'account' that it is
> creating (the uid)
> ----
> > 
> > What did you mean by 'escape the auto extries' exactly?
> ----
> It's odd but if I put these entries in 'LDAP Properties for all new
> users'...
> 
> apple-user-homeDirectory /Network/Servers/srv1.example.com/NetUsers/${USER}
> 
> <home_dir><url>afp://srv1.example.com/NetUsers/</url><path>${USER}</path></home_dir>
> 
> both are ignored when I create the user.
> 
> When I edit the already created user and enter something like (using
> ldap_useradmin):
> 
> /Network/Servers/srv1.example.com/NetUsers/administrator
>    in apple-user-homeDirectory 
> 
> <home_dir><url>afp://srv1.example.com/NetUsers/</url><path>administrator</path></home_dir>
>    in apple-user-homeurl
> 
> They are accepted

I think I know the reason - on the Module Config page, you need to enter these extra
attributes in the format :

apple-user-homeDirectory: /Network/Servers/srv1.example.com/NetUsers/${USER}
apple-user-homeurl: <home_dir><url>afp://srv1.example.com/NetUsers/</url><path>${USER}</path></home_dir>

Note the colon after the attribute name. I will add a comment about this on the Module
Config page in the next Webmin release.

 - Jamie