OK, I''ve got auth figured out for Linux login.
This is a good thing. A very good thing!
Now, if a user does "passwd" on the Linux box, I see that it updates
their LDAP password.
Another very good thing!
But I''m going to have non-Linux users too. I''m not
adventurous enough
at this point to set up a WIndows NT domain or anything like that for
the windows users, so I''ll just do local-login for them at the moment.
But they will still have to go to websites and such which ask them to
authenticate. I don''t yet have apache LDAP auth working, but
I''m
sure it will prove to be reasonably easy.
Once I get that done, I''ll need a way for these users to change the
passwords. In a pinch I guess I could ask them to download putty and
SSH into a Linux box. But that just seems ugly.
Is there a good web-based plugin for this that I can just grab
"off-the-shelf" without having to roll my own?
--
“Don''t eat anything you''ve ever seen advertised on TV”
- Michael Pollan, author of "In Defense of Food"
On 12/02/2009 10:39 AM, Alan McKay wrote:> OK, I''ve got auth figured out for Linux login. > > This is a good thing. A very good thing! > > Now, if a user does "passwd" on the Linux box, I see that it updates > their LDAP password. > > Another very good thing! > > But I''m going to have non-Linux users too. I''m not adventurous enough > at this point to set up a WIndows NT domain or anything like that for > the windows users, so I''ll just do local-login for them at the moment. > But they will still have to go to websites and such which ask them to > authenticate. I don''t yet have apache LDAP auth working, but I''m > sure it will prove to be reasonably easy. > > Once I get that done, I''ll need a way for these users to change the > passwords. In a pinch I guess I could ask them to download putty and > SSH into a Linux box. But that just seems ugly. > > Is there a good web-based plugin for this that I can just grab > "off-the-shelf" without having to roll my own? >I would think the Directory Server Gateway/Phonebook webapp should allow you to do that... http://directory.fedoraproject.org/wiki/DSGW --Chandra
On Wed, Dec 2, 2009 at 10:21 PM, Chandrasekar Kannan <ckannan@redhat.com> wrote:> I would think the Directory Server Gateway/Phonebook webapp > should allow you to do that... > http://directory.fedoraproject.org/wiki/DSGWExcellent - just what I was hoping for! -- “Don''t eat anything you''ve ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"
Hmmm, it seems that Centos-DS does not have this :
http://directory.fedoraproject.org/wiki/WebApps_Install
# Install the Directory Server Gateway package.
yum install fedora-ds-dsgw
# Run the setup-ds-dsgw script to set up the default instances of the
Directory Server Gateway, Directory Express, Org Chart, and Admin
Express. The setup-ds-dsgw script is in the /usr/sbin directory.
setup-ds-dsgw
[root@sandbox1 dirsrv]# yum search centos-ds
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
* addons: mirror.csclub.uwaterloo.ca
* extras: mirror.csclub.uwaterloo.ca
=============================================================Matched: centos-ds
==============================================================centos-ds.x86_64 :
CentOS Directory, Administration, and Console Suite
centos-ds-admin.x86_64 : CentOS Administration Server (admin)
centos-ds-base.x86_64 : CentOS Directory Server (base)
centos-ds-base-devel.x86_64 : Development libraries for CentOS Directory Server
centos-ds-console.noarch : CentOS Directory Server Management Console
Although it does have a directory with the HTML and other files :
[root@sandbox1 dirsrv]# pwd
/usr/share/dirsrv
This is not what I see when I got to http://myserver:9830/
I''ll keep poking around, but am sending this in case anyone out there
already knows how to do this on Centos.
I''ll start over on the Red Hat docs now ...
cheers,
-Alan
--
“Don''t eat anything you''ve ever seen advertised on TV”
- Michael Pollan, author of "In Defense of Food"
Alan McKay wrote:> Hmmm, it seems that Centos-DS does not have this : > > http://directory.fedoraproject.org/wiki/WebApps_Install >Right. You have to install fedora-ds-dsgw. You should be able to use fedora-ds-dsgw with centos-ds-base and centos-ds-admin.> # Install the Directory Server Gateway package. > yum install fedora-ds-dsgw > # Run the setup-ds-dsgw script to set up the default instances of the > Directory Server Gateway, Directory Express, Org Chart, and Admin > Express. The setup-ds-dsgw script is in the /usr/sbin directory. > setup-ds-dsgw > > > [root@sandbox1 dirsrv]# yum search centos-ds > Loaded plugins: fastestmirror, priorities > Loading mirror speeds from cached hostfile > * addons: mirror.csclub.uwaterloo.ca > * extras: mirror.csclub.uwaterloo.ca > =============================================================> Matched: centos-ds > ==============================================================> centos-ds.x86_64 : CentOS Directory, Administration, and Console Suite > centos-ds-admin.x86_64 : CentOS Administration Server (admin) > centos-ds-base.x86_64 : CentOS Directory Server (base) > centos-ds-base-devel.x86_64 : Development libraries for CentOS Directory Server > centos-ds-console.noarch : CentOS Directory Server Management Console > > Although it does have a directory with the HTML and other files : > [root@sandbox1 dirsrv]# pwd > /usr/share/dirsrv > > This is not what I see when I got to http://myserver:9830/ > > I''ll keep poking around, but am sending this in case anyone out there > already knows how to do this on Centos. > > I''ll start over on the Red Hat docs now ... > > cheers, > -Alan > >
> Right. You have to install fedora-ds-dsgw. You should be able to use > fedora-ds-dsgw with centos-ds-base and centos-ds-admin.Thanks. That will be my next step if the Centos list does not come back with a quasi-official package. I just shot an email off to them. I did find this thread where it was proposed about a year ago http://lists.centos.org/pipermail/centos-devel/2008-September/thread.html#3272 -- “Don''t eat anything you''ve ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"
Alan McKay wrote:>> Right. You have to install fedora-ds-dsgw. You should be able to use >> fedora-ds-dsgw with centos-ds-base and centos-ds-admin. >> > > Thanks. That will be my next step if the Centos list does not come > back with a quasi-official package. I just shot an email off to them. > I did find this thread where it was proposed about a year ago > > http://lists.centos.org/pipermail/centos-devel/2008-September/thread.html#3272 >I doubt there will ever be one, since there is no redhat-ds-dsgw either.
> I doubt there will ever be one, since there is no redhat-ds-dsgw either.Centos adds other extras in that do not come from Red Hat - so you never know -- “Don''t eat anything you''ve ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"