Package: gforge-ldap-openldap
Version: 3.1-26
Severity: wishlist

Ok, this could take a bit to describe, here - "FYI", heh.

* Scope: 
This might require some adaptation of GForge, to be implemented.

* Pertains to appliations:
- GForge
- Debconf
- SSH
- OpenLDAP



* Summary :

** Introduction

Each GFOrge 'user' and GForge 'group' may exist, in essence, as being a
user/group for the entire host. (This bears some pertinence about SE Linux,
LSM, RBAC, MLS, but "that's off-topic".)

** Admin's Part

Well, the system administrator has to ensure a well-working information
system, across each host and the entire network. Some careful, perhaps
"cusotm"  structuring of filesystem directories does serve to help for such,
truly.


** Debconf

Debconf is suitable as a general basis for package configuration -- I'm not
surprised if Redhat hasn't noticed that, though, given that it's "a matter of
Debian policy & Debian design".

Debconf, conceivably, can be "worked further into GForge", and worked-in, as
a sort of "data source" for "configuration data" (e.g.: for configuration
data that would be applied upon the simple-enough tempates, which exist
within the GForge codebase)


** The GForge-instance User Database

- is LDAP
- contains an RDN : ou=People , the "subtrees" of which may contain an ldap
atribute: homeDirectory

That directory has an apparent base: /var/lib/gforge/chroot/home/users/

That directory/value is configurable.


** The GForge-instance Group Database

- is, in much, in LDAP
- (such that I can notice, yet) doesn't seem to contain an attribute 
  analagous to the homeDirectory of a user object
- could be adapted, along with the LDAP schema that is being used to make
  the deb* LDAP object classes
- has a base directory : /var/lib/gforge/chroot/home/groups/

That base directory, furthemore, is configurable.



E.g.: Configuration for :
- "stuff under /home/ 
- site-wide user/group database incorporated with GForge, probably with
  NSS-LDAP:

  e.g. Projects Base Directory: /home/projects/
  e.g. Users Base Directory: /home/users/


....simple enough, heh


- "promptly", thus ends the feature request -


* Tangential Considerations : "Kindly, FYI"

** The LDAP Schema being used with Debian & GForge

...isn't known by many folks, "I have a hunch."

- is worth "mentioning to LDAP folks"
- pertains to OpenLDAP
- isn't my project, heh


** Debian & Ubuntu & GForge ?

- Ubuntu is :
-- both a "pretty" and "pretty-much updated" (presumably) Linux
   distro, //based on Debian//
-- a commmunity project
-- @ http://www.ubuntulinux.org/
-- such that seems to have been done, firstly, on the part of Canonical Ltd.
[ http://canonical.com ] - FYI

FYI also: Canonical uses Bazaar, which is based on/after Tom Lord's Arch
[TLA]; TLA/Fai/Arch/Bazaar "category" repositories can be mirrored
("bidirectionally") into CVS repositories.



So, that's some open-projects & long-term-project-related FYI, after the
feature request - kindly, in all, intended.


Thank you, sincerely & much.




- -
Sean Champ




-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i586)
Kernel: Linux 2.6.10
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages gforge-ldap-openldap depends on:
ii  debconf                       1.4.42     Debian configuration management sy
ii  debianutils                   2.11.2     Miscellaneous utilities specific t
ii  gforge-common                 3.1-26     Collaborative development tool - s
ii  gforge-db-postgresql [gforge- 3.1-26     Collaborative development tool - d
ii  ldap-utils                    2.1.30-3   OpenLDAP utilities
ii  libdbd-pg-perl                1.32-2     a PostgreSQL interface for Perl 5 
ii  libdbi-perl                   1.46-5     Perl5 database interface by Tim Bu
ii  libnss-ldap                   220-1      NSS module for using LDAP as a nam
ii  perl                          5.8.4-6    Larry Wall's Practical Extraction 
ii  slapd                         2.1.30-3   OpenLDAP server (slapd)

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to