Posts in category LDAP

Removed silly limitations on system groups with LDAP backend enabled

Responding to changeset 279 and explaining the reasons of changeset 304, there is now no more limitations when creating system groups.

If the LDAP backend is enabled, the newly created system group will go into the LDAP backend.

This makes NFS works perfectly on LDAP-enabled clients, which now see all groups when listings ACLs and standard posix perms.

Now, the licorn-ldap-server debian package tries to move every important pre-existing system group (acl, licorn-wmi) from the Unix backend to the LDAP one. This will implicitly install them network-wide and avoid the need to create them on every ALT®. Finally this will help propagate admin privileges on every client.

LDAP backend nearing completion

Only 7 working days (with standard working hours !) were needed to implement the biggest part of the LDAP backend and fix blocker bugs. It works completely today (get/add/mod/del, wouhou !).

The only work not yet done is slapd configuration, which is not strictly the backend functionnality, but I want it done: Licorn has to autoconfigure slapd when it's freshly installed. Typically on a Lucid Lynx system (Ubuntu), cn=config is completely empty, which render slapd totally unusable, which is not acceptable for us.

This could be resolved by packaging work. But I want Licorn to be autonomous on different system and not duplicate packaging work among distros. By the way, Licorn must in the end be able to change the LDAP base_dn and other configuration attributes. Even though this functionnality is less than autoconfiguration, autoconfiguration is not far behind (the way that I see it, in KISS technology).

WMI released, LDAP in progress

I released the version 1.1 of Licorn®, which is quite a good news. The first release after nearly a year of silence and 2 weeks of code.

All WMI features are completely functionnal, except the "import users" one, which is not critical in early deployments.

LDAP work has begun and I plan to release the first beta version (managing users and groups) between the middle and the end of the week. LDAP support will be very preliminary: we will support only all *nix features, not the SAMBA ones. But ongoing work will take care of extending these.

First goal is to make Linux clients authenticate against a Licorn® server, making the whole thing rock solid. I hate bugs ;-)