[gentoo-commits] gentoo commit in xml/htdocs/proj/en/infrastructure: ldap.xml

[Robin H. Johnson (robbat2)]

robbat2     10/05/02 23:49:24

  Modified:             ldap.xml
  Log:
  Update Gentoo LDAP howto with instructions on changing your password and shell, as well as some of the other schema fields that are in use but are part of stock schemas rather than our custom Gentoo schema.

Revision  Changes    Path
1.32                 xml/htdocs/proj/en/infrastructure/ldap.xml

file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/infrastructure/ldap.xml?rev=1.32&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/infrastructure/ldap.xml?rev=1.32&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/infrastructure/ldap.xml?r1=1.31&r2=1.32

Index: ldap.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/infrastructure/ldap.xml,v
retrieving revision 1.31
retrieving revision 1.32
diff -p -w -b -B -u -u -r1.31 -r1.32
--- ldap.xml	24 Apr 2010 18:51:35 -0000	1.31
+++ ldap.xml	2 May 2010 23:49:24 -0000	1.32
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE guide SYSTEM "/dtd/guide.dtd">
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/proj/en/infrastructure/ldap.xml,v 1.31 2010/04/24 18:51:35 robbat2 Exp $ -->
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/proj/en/infrastructure/ldap.xml,v 1.32 2010/05/02 23:49:24 robbat2 Exp $ -->
 
 <guide link="/proj/en/infrastructure/ldap.xml">
 <title>Gentoo Infrastructure LDAP guide</title>
@@ -27,8 +27,8 @@ and administrators.
 <!-- See http://creativecommons.org/licenses/by-sa/2.5 -->
 <license/>
 
-<version>1.20</version>
-<date>2010-04-24</date>
+<version>1.25</version>
+<date>2010-05-02</date>
 
 <chapter>
 <title>Key Concepts</title>
@@ -292,11 +292,66 @@ otherwise noted. Required fields are emp
 All dates must be formatted as ISO8601, YYYY/MM/DD.
 </note>
 
-<p
->The following attributes were in use at some point in the past, but have
-been retired: <e>gentooHerd/herd</e>, <e>gentooAltMail/altMail</e>, <e>gentooForumsUID/forumsUID</e>.
+<p>
+The following attributes were in use at some point in the past, but have
+been retired: <e>gentooHerd/herd</e>, <e>gentooAltMail/altMail</e>,
+<e>gentooForumsUID/forumsUID</e>.
 </p>
 
+<p>Additionally, we use a number of standard LDAP schemas for user records: <e>inetOrgPerson</e>, <e>organizationalPerson</e>, <e>person</e>, <e>posixAccount</e>, <e>shadowAccount</e>. Some of the attributes in these schemas are listed below.</p>
+
+<table>
+  <tr>
+    <th>Attribute Name</th>
+    <th>Access Level</th>
+    <th>Description</th>
+    <th>Type</th>
+    <th>Format</th>
+  </tr>
+  <tr>
+    <ti><e>mail</e></ti>
+    <ti>user</ti>
+    <ti>alternative email addresses</ti>
+    <ti>multiple, required</ti>
+    <ti>UTF-8</ti>
+  </tr>
+  <tr>
+	<ti><e>cn</e>, <e>sn</e>, <e>givenName</e></ti>
+    <ti>recruiters</ti>
+    <ti>real name of developer</ti>
+    <ti>single, required</ti>
+    <ti>UTF-8</ti>
+  </tr>
+  <tr>
+	<ti><e>gecos</e></ti>
+    <ti>recruiters</ti>
+    <ti>real name of developer for script usage</ti>
+    <ti>single, required</ti>
+    <ti>ASCII, 7-bit clean</ti>
+  </tr>
+  <tr>
+	<ti><e>initials</e></ti>
+    <ti>recruiters</ti>
+    <ti>real name of developer</ti>
+    <ti>single, required</ti>
+    <ti>UTF-8</ti>
+  </tr>
+  <tr>
+	<ti><e>loginShell</e></ti>
+    <ti>user</ti>
+	<ti>login shell, change with <e>chsh</e></ti>
+    <ti>single, required</ti>
+    <ti>ASCII</ti>
+  </tr>
+  <tr>
+	<ti><e>userPassword</e></ti>
+    <ti>user</ti>
+	<ti>password, change with <e>passwd</e> ONLY</ti>
+    <ti>single, required</ti>
+    <ti>ASCII, hashed</ti>
+  </tr>
+</table>
+
 </body>
 </section>
 <section>
@@ -386,14 +441,14 @@ been retired: <e>gentooHerd/herd</e>, <e
 <p>
 These are the main concepts of the perl_ldap script used for user
 administration. Invoking <e>perl_ldap</e> without arguments shows a nice help.
-Your own dev.gentoo.org password is asked when binding.
+Your own LDAP password is required when binding.
 </p>
 
 <p>
 The script is the infra supported method for managing entries, nothing prevents
 you from using any LDAP browser you like for modifying your attributes. If you
 like to use something else, ask infra for connection details but keep in mind
-that we won't support and/or troubleshoot other browsers issues.
+that we won't support and/or troubleshoot other browser's issues.
 </p>
 
 <p>
@@ -472,6 +527,18 @@ Only replace &lt;username&gt;, not "user
 # <i>perl_ldap -b user -E sshPublicKey "$(cat oldpubkey)" &lt;username&gt;</i>
 </pre>
 
+<pre caption="Change your LDAP password">
+<comment>To change your password, simply use the normal <i>passwd</i> command on any LDAP-enabled server.</comment>
+<comment><b>Do not use perl_ldap to change your password, as it does not perform any password hashing.</b></comment>
+# <i>passwd</i>
+</pre>
+
+<pre caption="Change your login shell">
+<comment>To change your password, simply use the normal <i>chsh</i> command on any LDAP-enabled server.</comment>
+<comment><b>If you want to use a shell other than bash, ask infra about it's availability on other machines</b></comment>
+# <i>chsh</i>
+</pre>
+
 </body>
 </section>
 <section>
@@ -569,7 +636,7 @@ infra-cvsadmin.group, infra-system.group
 
 <ul>
   <li>Master LDAP Server - ldap1.gentoo.org</li>
-  <li>Slave LDAP Server - ldap2.gentoo.org</li>
+  <li>Slave LDAP Server - ldap2.gentoo.org (presently a CNAME to ldap1)</li>
   <li>Slave LDAP Server - ldap3.gentoo.org</li>
   <li>Slave LDAP Server - ldap4.gentoo.org</li>
   <li><uri link="http://www.tldp.org/HOWTO/html_single/LDAP-HOWTO">LDAP HOWTO</uri></li>