= LDAP Groups 2010 =

This is a part of a [[GoogleSoc2010]] project named "LDAP/AD groups support", that would be implemented by [[AndrewGrigorev]]. Another part described at [[KerberosAuth2010]].

MoinMoin support an authentication through LDAP, and need an ability to get information about groups from LDAP.

||<<MonthCalendar(,2010,5,,,1)>>||<<MonthCalendar(,2010,6,,,1)>>||<<MonthCalendar(,2010,7,,,1)>>||<<MonthCalendar(,2010,8,,,1)>>||

/!\ Please update your diary DAILY (and work regularly on your project).

== Timeline ==

May 10 - May 24:

 * [[GoogleSoc2010#What_you_can_do_before_starting_to_code_for_SOC]]
 * search this wiki for ideas/contributions e.g. [[HowTo/UbuntuAD]], [[Groups2009]]

May 24 - June 27:

 * [[LDAPConnection]] and [[LDAPLazyGroups]], using some code from [[Groups2009]] ldap_group4.patch attachment
 * Refactoring of [[LDAPAuth]] to use [[LDAPConnection]]

June 27 - July 4:

 * [[LDAPGroups]] backend with support of nested groups

July 5 - July 11:

 * Testing, fixing bugs, writing documentation.

== Ideas, Feedback ==

 * see [[FeatureRequests/LdapBasedGroupDefinitions]]

== ToDo ==

[[LDAP2010/ToDo]]

== Links ==

 * [[LDAP2010/memberOf]]
 * [[LDAP2010/OUGroups]]

== some further ideas ==

This is not stuff you should immediatly jump on. But if there is time may be think a bit on it or try to solve it. Or find other parts where we need changes.

If ldap is fully implemented there are some site effects we need to care on too, e.g.
 * may be we need an action to destinguish who never used his ldap account to create an userprofile.
  * SystemAdmin lists only users who successful logged in once. With much users SystemAdmin should have pagination.
 * may be we need a way to identify profiles of users removed from ldap for cleanup. E.g. these users should be set to disabled in their profile

----
CategoryGsocProject