diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2011-April/003392.html')
| -rw-r--r-- | zarb-ml/mageia-sysadm/2011-April/003392.html | 114 |
1 files changed, 114 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2011-April/003392.html b/zarb-ml/mageia-sysadm/2011-April/003392.html new file mode 100644 index 000000000..65817b9c3 --- /dev/null +++ b/zarb-ml/mageia-sysadm/2011-April/003392.html @@ -0,0 +1,114 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] Dynlist and change on ldap + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Dynlist%20and%20change%20on%20ldap&In-Reply-To=%3C20110425101259.GA21138%40sisay.ephaone.org%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="003389.html"> + <LINK REL="Next" HREF="003393.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] Dynlist and change on ldap</H1> + <B>Michael scherer</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Dynlist%20and%20change%20on%20ldap&In-Reply-To=%3C20110425101259.GA21138%40sisay.ephaone.org%3E" + TITLE="[Mageia-sysadm] Dynlist and change on ldap">misc at zarb.org + </A><BR> + <I>Mon Apr 25 12:12:59 CEST 2011</I> + <P><UL> + <LI>Previous message: <A HREF="003389.html">[Mageia-sysadm] Dynlist and change on ldap +</A></li> + <LI>Next message: <A HREF="003393.html">[Mageia-sysadm] Dynlist and change on ldap +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#3392">[ date ]</a> + <a href="thread.html#3392">[ thread ]</a> + <a href="subject.html#3392">[ subject ]</a> + <a href="author.html#3392">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Thu, Apr 21, 2011 at 10:09:34PM +0200, Michael Scherer wrote: +><i> Le jeudi 21 avril 2011 à 22:04 +0200, Michael Scherer a écrit : +</I>><i> +</I>><i> > To use it, just add a group like this : +</I>><i> > +</I>><i> > cn=mga-test_dyn,ou=Group,dc=mageia,dc=org +</I>><i> > cn: mga-test_dyn +</I>><i> > objectClass: posixGroup +</I>><i> > objectClass: groupOfURLs +</I>><i> > gidNumber: 5013 +</I>><i> > memberURL: +</I>><i> > <A HREF="ldap:///ou=People,dc=mageia,dc=org?dn?sub?(&(objectClass=posixAccount">ldap:///ou=People,dc=mageia,dc=org?dn?sub?(&(objectClass=posixAccount</A>)(memberOf=cn=mga-council,ou=Group,dc=mageia,dc=org)) +</I>><i> > memberURL: +</I>><i> > <A HREF="ldap:///ou=People,dc=mageia,dc=org?dn?sub?(&(objectClass=posixAccount">ldap:///ou=People,dc=mageia,dc=org?dn?sub?(&(objectClass=posixAccount</A>)(memberOf=cn=mga-sysadmin,ou=Group,dc=mageia,dc=org)) +</I>><i> > +</I>><i> > This one will create a group with sysadmin and council member. +</I>><i> > +</I>><i> > # getent group mga-test_dyn +</I>><i> > mga-test_dyn:*:5013:misc,rda,boklm,tmb,ennael,dams,buchan,dmorgan,nanardon,colin,blino,pterjan +</I>><i> > +</I>><i> > ( ok here, it doesn't work fully, wobo and trishf42 are missing but +</I>><i> > since ennael and rda are not in sysadmin group, this kinda work, I will +</I>><i> > look at this more closely, maybe a index issue, or memberOf not being +</I>><i> > refreshed ) +</I>><i> +</I>><i> Ok as usual, I first say something stupid and then find the issue. +</I>><i> +</I>><i> Of course, for this example, we should not add +</I>><i> "(objectClass=posixAccount)" in the filter, as neither wobo or trishf42 +</I>><i> have a posixAccount :) +</I> +So I finally made the changes to ldap : +created a group called mga-shell_access +changed svn acl for that + +the only issue that I faced was that some members ( ie all i18n and me ) were +not able to use the svn, as "id $login" didn't show that they were in the +group. I do not know how I solved ( in fact, it started to work once I added +i18n to the test_dyn group I created to test everything ). + +I suspect some strange ldap corruption ( since some groups were using duplicated GID ) +since now everything except my account work. id do not show that I am in the mga-shell_access +group, but getent group show ( and I can access by ssh to svn.mageia.org ). + +Besides doing a dump/reload of ldap, does someone has a proposal +( I did db_recover and slapindex, just by pure cargo culting ) ? + +-- +Michael Scherer + + +</PRE> + + + + + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="003389.html">[Mageia-sysadm] Dynlist and change on ldap +</A></li> + <LI>Next message: <A HREF="003393.html">[Mageia-sysadm] Dynlist and change on ldap +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#3392">[ date ]</a> + <a href="thread.html#3392">[ thread ]</a> + <a href="subject.html#3392">[ subject ]</a> + <a href="author.html#3392">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |