LDAP: Difference between revisions

From NURDspace
(Minor attempt at removing outdated shit)
Line 42: Line 42:


== (Un)locking the front door ==
== (Un)locking the front door ==
See [[Spacelock]].
See [[Network/Services/DoorLock]].

Revision as of 21:54, 6 September 2024

Outdated IMPORTANT: The content of this section is outdated. Please update this section if you can. If you have checked or updated this section and found the content to be suitable, please remove this notice.
LDAP
NoPicture.png
Participants Fwd
Skills Linux, OpenLDAP, FreeRadius
Status Finished
Niche Software
Purpose Infrastructure
Tool Yes
Location
Cost
Tool category

LDAP Property "Tool Image" (as page type) with input value "File:{{{Picture}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. {{{Picture}}} {{#if:Yes | [[Tool Owner::{{{ProjectParticipants}}} | }} {{#if:Yes | [[Tool Cost::{{{Cost}}} | }}

Status

Connected machines and services

Workstations

The workstations listed above are set up as follows:

  • Homedirs mounted over NFS from dumpster-a (except user 'printer' on PrinterPC)
  • Users in the LDAP 'sudo' group can sudo.
  • Homedirs are created on the NFS-export when adding a user to LDAP (like this)

VM's

  • NURDServices (only users in group "admins" can log in)
  • Stroopwafel (a VM for all members to irssi or other processes)

Wiki

Authentication on this wiki is done via SAML.

Limitations

  • The mediawiki login system converts the first character of usernames to uppercase due to restrictions on usernames. To get around this we've enabled $wgLDAPLowercaseUsernameScheme. This requires usernames to be all lowercase in the LDAP.
  • Users are maintained through the LDAP, so creating a user on the Wiki is no longer possible. It could be enabled, but that would require adding a user with write-access in the LDAP. That seems a little scary for now. It would however offer the possibility of changing your LDAP password through the Wiki.

Wifi (Spacenet)

The LDAP serves as a userdb for Spacenet, which is connected via FreeRADIUS. For full details see the Spacenet-page. Only users in group "spacenet" can log in.

DHCP

See the network page.

(Un)locking the front door

See Network/Services/DoorLock.