On Wed, 2005-03-23 at 18:17 -0600, Les Mikesell wrote: > On Tue, 2005-03-22 at 23:50, Paul wrote: > > Well they vary from small (a few hundred) to large (hundreds of > > thousands of entries). I'm thinking of the smaller side of the spectrum > > where you are dealing with a fairly flat structure. I believe that SELS > > 9 includes a plugin to Yast to do that. > > The LDAP database everyone who doesn't already have one wants would have > PosixAccount and SambaAccount schemas set up so you make one entry and > change your password in one place and you can log in to any Linux/Unix > box on the net and also use it as your Windows domain controller with > same login/passwords. Nice, but less essential would be the addressbook > entries that work with Outlook and other MUA's, and the email delivery > entries that work with sendmail to allow distributed mailboxes. Isn't > this stuff close enough to a standard that it could work out of the box? > That is, have a checkbox item to make a machine an LDAP server like the > one to make it a client. I agree it should be pretty much like that ... launch a wizard, input the base dn, check to see if samba is installed and ask if you want it to use OpenLDAP for authentication and if it is the primary or backup domain controller update the smb.conf and have it populate a basic tree. SuSE Enterprise 9 supposedly has that functionality with a yast plugin ... I have not had a chance play with SELS 9 yet. Fedora should have something like system-config-ldap would be nice to have to make RH/Fedora better for small organizations with a part-time or single person IT staff. I've looked at several GUI tools to manage OpenLDAP, but they are either too generic or not maintainted and don't support Samba 3 schema or have stability issues. Regards, Paul
