summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-sysadm/2010-December/001115.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-sysadm/2010-December/001115.html')
-rw-r--r--zarb-ml/mageia-sysadm/2010-December/001115.html107
1 files changed, 107 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2010-December/001115.html b/zarb-ml/mageia-sysadm/2010-December/001115.html
new file mode 100644
index 000000000..282b28119
--- /dev/null
+++ b/zarb-ml/mageia-sysadm/2010-December/001115.html
@@ -0,0 +1,107 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-sysadm] Mailling list type
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Mailling%20list%20type&In-Reply-To=%3C201012101443.11595.bgmilne%40multilinks.com%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="001114.html">
+ <LINK REL="Next" HREF="001116.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-sysadm] Mailling list type</H1>
+ <B>Buchan Milne</B>
+ <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Mailling%20list%20type&In-Reply-To=%3C201012101443.11595.bgmilne%40multilinks.com%3E"
+ TITLE="[Mageia-sysadm] Mailling list type">bgmilne at multilinks.com
+ </A><BR>
+ <I>Fri Dec 10 14:43:10 CET 2010</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="001114.html">[Mageia-sysadm] Mailling list type
+</A></li>
+ <LI>Next message: <A HREF="001116.html">[Mageia-sysadm] Mailling list type
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#1115">[ date ]</a>
+ <a href="thread.html#1115">[ thread ]</a>
+ <a href="subject.html#1115">[ subject ]</a>
+ <a href="author.html#1115">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On Friday, 10 December 2010 13:15:31 Michael Scherer wrote:
+
+&gt;<i> So after checking sympa doc ( and code source ), we face a problem
+</I>&gt;<i> here .
+</I>&gt;<i>
+</I>&gt;<i> Here
+</I>&gt;<i> ( <A HREF="http://www.sympa.org/manual/authorization-scenarios#named_filters">http://www.sympa.org/manual/authorization-scenarios#named_filters</A> ),
+</I>&gt;<i> this is explained that we can do a query to ldap to find if a email can
+</I>&gt;<i> post to a list. So far so good.
+</I>&gt;<i>
+</I>&gt;<i> But just one query.
+</I>&gt;<i>
+</I>&gt;<i> And so, I am unable to find a query who can give me the list of email of
+</I>&gt;<i> people of a ldap group in our ldap ( as we do not use memberOf )
+</I>&gt;<i>
+</I>&gt;<i> We have 3 solutions :
+</I>&gt;<i> - someone add the support for ldap queries with 2 level in sympa ( as
+</I>&gt;<i> this is done for others ldap usage )
+</I>&gt;<i>
+</I>&gt;<i> - we use slapo-memberof
+</I>&gt;<i> ( <A HREF="http://www.openldap.org/doc/admin24/overlays.html">http://www.openldap.org/doc/admin24/overlays.html</A> )
+</I>
+I have mentioned that we may need slapo-memberof.
+
+&gt;<i> - we use slapo-dynlist ( same page )
+</I>&gt;<i>
+</I>&gt;<i> slapo-memberof seems to be what we want, but this doesn't seems dynamic
+</I>&gt;<i> ( ie, we will have to update the 10 existing entries in ldap to make
+</I>&gt;<i> them compliant ).
+</I>
+No real issue ...
+
+&gt;<i> slapo-dynlist seems overkill.
+</I>&gt;<i>
+</I>&gt;<i> Any LDAP guru to give insight ?
+</I>
+slapo-dynlist has some issues when used to provide features like slapo-
+memberof. Specifically, you can't filter on the dyanmic values, so e.g. search
+for &quot;(&amp;(objectClass=posixAccount)(memberof=cn=mageia-xxx,ou=Group....)
+(uid=foo))&quot; is not feasible to try and determine authorization in a single
+search.
+
+So, I think we have only two options, and using slapo-memberof may be the best
+(as it solves the problem for other clients). There are some caveats, but in
+our deployment they should not matter.
+
+Regards,
+Buchan
+</PRE>
+
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="001114.html">[Mageia-sysadm] Mailling list type
+</A></li>
+ <LI>Next message: <A HREF="001116.html">[Mageia-sysadm] Mailling list type
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#1115">[ date ]</a>
+ <a href="thread.html#1115">[ thread ]</a>
+ <a href="subject.html#1115">[ subject ]</a>
+ <a href="author.html#1115">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm
+mailing list</a><br>
+</body></html>