Re: [webmin-devel] LDAP Groups and RFC2307BIS

[Stephen G. P. <sg...@ma...>]

Hi Jamie,

The RFC has not changed in four years and I think is unlikely too.
Actually, developing this may not be not as bad as it sounds - e.g. the
attributes are read from LDAP and written to it regardless of the names
I think so backend writing / reading can remain as is.
Here is a break down of what we need:
In module config:
- a checkbox (enable rfc2307bis)
- a text field (dn member attribute name).

In Edit User, Group Membership:
- Secondary Groups - functions just as now, but is relabelled 'Secondary
Groups (by UID)'
- New panel, shown only if rcf2307bis is set  - Secondary Groups (by DN)
- pulls list of groups from the dn member attribute dictated by the
config. The left hand side can be populated in the same way as the
existing panel. The right hand will need a new query of some kind.

In Edit Group, Group Details:
- Members - functions just as now, but labelled 'Member UIDs'
- New panel, shown only if rfc2307bis is set - labelled 'Member DNs'.
The left hand side will need a new LDAP query to populate it. Will need
a new variable to store list in.

In LDAP Groups list:
- Concatenate the two attribute lists together before displaying as
members column

I'll have a look at the code over the holiday and see if I can come up
with a provisional patch.

regards
Stephen