[svlug] Favorite LDAP user admin tool

[Don Marti]

begin Mike Castle quotation of Tue, Sep 20, 2005 at 09:52:08AM -0700:

> Since I'm an LDAP novice, I'm having some learning curves.  For example, I
> can't just edit a passwd file somewhere and run make in /var/yp anymore, so
> I guess I need a real admin tool.

Craig Swanson and Matt Lung recommend these three:

Idealx command-line utilities 
phpLDAPadmin
LDAP Account Manager (LAM)

http://www.linuxjournal.com/article/8119

John Terpstra has an article on the last one:
http://www.linuxjournal.com/article/7382

> Also, if anyone has a pointer on this:  The Samba config files say that
> some LDAP configurations will allow a user to change a password in one
> domain (say, posix accounts using passwd), and that would propogate the
> change to other domains (say, the samba password stuff).  What's the magic
> that causes this to happen (if it does) with OpenLDAP?  I've glanced
> through the code and the schema files, but I haven't noticed anything
> obvious that says "tie these things together."

Craig and Matt's article has an smb.conf example for
this (Listing 5).

If you're going to be maintaining LDAP and Samba
regularly, you should pick up a copy of "Samba-3 by
Example: Practical Exercises to Successful Deployment,
2nd Edition" too.

http://www.phptr.com/bookstore/product.asp?isbn=013188221X&rl=1

Lots of examples of real-world configurations.

-- 
Don Marti
http://zgp.org/~dmarti/
dmarti at zgp.org