|
IMPORTANT: The content of this section is outdated. Please update this section if you can. If you have checked or updated this section and found the content to be suitable, please remove this notice. |
| LDAP | |
|---|---|
 | |
| Participants | Fwd |
| Skills | Linux, OpenLDAP, FreeRadius |
| Status | Finished |
| Niche | Software |
| Purpose | Infrastructure |
| Tool | Yes |
| Location | |
| Cost | |
| Tool category | |
LDAP Property "Tool Image" (as page type) with input value "File:{{{Picture}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. {{{Picture}}} {{#if:Yes | [[Tool Owner::{{{ProjectParticipants}}} | }} {{#if:Yes | [[Tool Cost::{{{Cost}}} | }}
Status
Connected machines and services
Workstations
The workstations listed above are set up as follows:
- Homedirs mounted over NFS from dumpster-a (except user 'printer' on PrinterPC)
- Users in the LDAP 'sudo' group can sudo.
- Homedirs are created on the NFS-export when adding a user to LDAP (like this)
VM's
- NURDServices (only users in group "admins" can log in)
- Stroopwafel (a VM for all members to irssi or other processes)
Wiki
Authentication on this wiki is done via SAML.
Limitations
- The mediawiki login system converts the first character of usernames to uppercase due to restrictions on usernames. To get around this we've enabled $wgLDAPLowercaseUsernameScheme. This requires usernames to be all lowercase in the LDAP.
- Users are maintained through the LDAP, so creating a user on the Wiki is no longer possible. It could be enabled, but that would require adding a user with write-access in the LDAP. That seems a little scary for now. It would however offer the possibility of changing your LDAP password through the Wiki.
Wifi (Spacenet)
The LDAP serves as a userdb for Spacenet, which is connected via FreeRADIUS. For full details see the Spacenet-page. Only users in group "spacenet" can log in.
DHCP
See the network page.
(Un)locking the front door
See Spacelock.