diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2010-December/001115.html')
-rw-r--r-- | zarb-ml/mageia-sysadm/2010-December/001115.html | 107 |
1 files changed, 107 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2010-December/001115.html b/zarb-ml/mageia-sysadm/2010-December/001115.html new file mode 100644 index 000000000..282b28119 --- /dev/null +++ b/zarb-ml/mageia-sysadm/2010-December/001115.html @@ -0,0 +1,107 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] Mailling list type + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Mailling%20list%20type&In-Reply-To=%3C201012101443.11595.bgmilne%40multilinks.com%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="001114.html"> + <LINK REL="Next" HREF="001116.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] Mailling list type</H1> + <B>Buchan Milne</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Mailling%20list%20type&In-Reply-To=%3C201012101443.11595.bgmilne%40multilinks.com%3E" + TITLE="[Mageia-sysadm] Mailling list type">bgmilne at multilinks.com + </A><BR> + <I>Fri Dec 10 14:43:10 CET 2010</I> + <P><UL> + <LI>Previous message: <A HREF="001114.html">[Mageia-sysadm] Mailling list type +</A></li> + <LI>Next message: <A HREF="001116.html">[Mageia-sysadm] Mailling list type +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#1115">[ date ]</a> + <a href="thread.html#1115">[ thread ]</a> + <a href="subject.html#1115">[ subject ]</a> + <a href="author.html#1115">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Friday, 10 December 2010 13:15:31 Michael Scherer wrote: + +><i> So after checking sympa doc ( and code source ), we face a problem +</I>><i> here . +</I>><i> +</I>><i> Here +</I>><i> ( <A HREF="http://www.sympa.org/manual/authorization-scenarios#named_filters">http://www.sympa.org/manual/authorization-scenarios#named_filters</A> ), +</I>><i> this is explained that we can do a query to ldap to find if a email can +</I>><i> post to a list. So far so good. +</I>><i> +</I>><i> But just one query. +</I>><i> +</I>><i> And so, I am unable to find a query who can give me the list of email of +</I>><i> people of a ldap group in our ldap ( as we do not use memberOf ) +</I>><i> +</I>><i> We have 3 solutions : +</I>><i> - someone add the support for ldap queries with 2 level in sympa ( as +</I>><i> this is done for others ldap usage ) +</I>><i> +</I>><i> - we use slapo-memberof +</I>><i> ( <A HREF="http://www.openldap.org/doc/admin24/overlays.html">http://www.openldap.org/doc/admin24/overlays.html</A> ) +</I> +I have mentioned that we may need slapo-memberof. + +><i> - we use slapo-dynlist ( same page ) +</I>><i> +</I>><i> slapo-memberof seems to be what we want, but this doesn't seems dynamic +</I>><i> ( ie, we will have to update the 10 existing entries in ldap to make +</I>><i> them compliant ). +</I> +No real issue ... + +><i> slapo-dynlist seems overkill. +</I>><i> +</I>><i> Any LDAP guru to give insight ? +</I> +slapo-dynlist has some issues when used to provide features like slapo- +memberof. Specifically, you can't filter on the dyanmic values, so e.g. search +for "(&(objectClass=posixAccount)(memberof=cn=mageia-xxx,ou=Group....) +(uid=foo))" is not feasible to try and determine authorization in a single +search. + +So, I think we have only two options, and using slapo-memberof may be the best +(as it solves the problem for other clients). There are some caveats, but in +our deployment they should not matter. + +Regards, +Buchan +</PRE> + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="001114.html">[Mageia-sysadm] Mailling list type +</A></li> + <LI>Next message: <A HREF="001116.html">[Mageia-sysadm] Mailling list type +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#1115">[ date ]</a> + <a href="thread.html#1115">[ thread ]</a> + <a href="subject.html#1115">[ subject ]</a> + <a href="author.html#1115">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |