LDAP Groups 2010
This is a part of a GoogleSoc2010 project named "LDAP/AD groups support", that would be implemented by AndrewGrigorev. Another part described at KerberosAuth2010.
MoinMoin support an authentication through LDAP, and need an ability to get information about groups from LDAP.
|
|
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
![/!\](/moin_static19/modernized/img/alert.png "/!\"){kind=small}
Please update your diary DAILY (and work regularly on your project).
Timeline
May 10 - May 24:
GoogleSoc2010#What_you_can_do_before_starting_to_code_for_SOC
search this wiki for ideas/contributions e.g. HowTo/UbuntuAD, Groups2009
May 24 - June 27:
LDAPConnection and LDAPLazyGroups, using some code from Groups2009 ldap_group4.patch attachment
Refactoring of LDAPAuth to use LDAPConnection
June 27 - July 4:
LDAPGroups backend with support of nested groups
July 5 - July 11:
- Testing, fixing bugs, writing documentation.
Ideas, Feedback
ToDo
Links
some further ideas
This is not stuff you should immediatly jump on. But if there is time may be think a bit on it or try to solve it. Or find other parts where we need changes.
If ldap is fully implemented there are some site effects we need to care on too, e.g.
- may be we need an action to destinguish who never used his ldap account to create an userprofile.
SystemAdmin lists only users who successful logged in once. With much users SystemAdmin should have pagination.
- may be we need a way to identify profiles of users removed from ldap for cleanup. E.g. these users should be set to disabled in their profile