1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-sysadm] Mailling list type
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Mailling%20list%20type&In-Reply-To=%3C201012101443.11595.bgmilne%40multilinks.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="001114.html">
<LINK REL="Next" HREF="001116.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-sysadm] Mailling list type</H1>
<B>Buchan Milne</B>
<A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Mailling%20list%20type&In-Reply-To=%3C201012101443.11595.bgmilne%40multilinks.com%3E"
TITLE="[Mageia-sysadm] Mailling list type">bgmilne at multilinks.com
</A><BR>
<I>Fri Dec 10 14:43:10 CET 2010</I>
<P><UL>
<LI>Previous message: <A HREF="001114.html">[Mageia-sysadm] Mailling list type
</A></li>
<LI>Next message: <A HREF="001116.html">[Mageia-sysadm] Mailling list type
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#1115">[ date ]</a>
<a href="thread.html#1115">[ thread ]</a>
<a href="subject.html#1115">[ subject ]</a>
<a href="author.html#1115">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>On Friday, 10 December 2010 13:15:31 Michael Scherer wrote:
><i> So after checking sympa doc ( and code source ), we face a problem
</I>><i> here .
</I>><i>
</I>><i> Here
</I>><i> ( <A HREF="http://www.sympa.org/manual/authorization-scenarios#named_filters">http://www.sympa.org/manual/authorization-scenarios#named_filters</A> ),
</I>><i> this is explained that we can do a query to ldap to find if a email can
</I>><i> post to a list. So far so good.
</I>><i>
</I>><i> But just one query.
</I>><i>
</I>><i> And so, I am unable to find a query who can give me the list of email of
</I>><i> people of a ldap group in our ldap ( as we do not use memberOf )
</I>><i>
</I>><i> We have 3 solutions :
</I>><i> - someone add the support for ldap queries with 2 level in sympa ( as
</I>><i> this is done for others ldap usage )
</I>><i>
</I>><i> - we use slapo-memberof
</I>><i> ( <A HREF="http://www.openldap.org/doc/admin24/overlays.html">http://www.openldap.org/doc/admin24/overlays.html</A> )
</I>
I have mentioned that we may need slapo-memberof.
><i> - we use slapo-dynlist ( same page )
</I>><i>
</I>><i> slapo-memberof seems to be what we want, but this doesn't seems dynamic
</I>><i> ( ie, we will have to update the 10 existing entries in ldap to make
</I>><i> them compliant ).
</I>
No real issue ...
><i> slapo-dynlist seems overkill.
</I>><i>
</I>><i> Any LDAP guru to give insight ?
</I>
slapo-dynlist has some issues when used to provide features like slapo-
memberof. Specifically, you can't filter on the dyanmic values, so e.g. search
for "(&(objectClass=posixAccount)(memberof=cn=mageia-xxx,ou=Group....)
(uid=foo))" is not feasible to try and determine authorization in a single
search.
So, I think we have only two options, and using slapo-memberof may be the best
(as it solves the problem for other clients). There are some caveats, but in
our deployment they should not matter.
Regards,
Buchan
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="001114.html">[Mageia-sysadm] Mailling list type
</A></li>
<LI>Next message: <A HREF="001116.html">[Mageia-sysadm] Mailling list type
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#1115">[ date ]</a>
<a href="thread.html#1115">[ thread ]</a>
<a href="subject.html#1115">[ subject ]</a>
<a href="author.html#1115">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm
mailing list</a><br>
</body></html>
|
