[TriLUG] Need some help with LDAP

[Joseph O'Doherty]

If you don't mind creating your own schema, you could do something like:

attributetype (
        1.1.2.1.15
        NAME 'status'
        DESC 'the current status of this account (one of active,
pending, closed)'
        EQUALITY caseIgnoreIA5Match
        SUBSTR caseIgnoreIA5SubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024}
        SINGLE-VALUE )

See: http://www.openldap.org/doc/admin24/schema.html

Be careful if you make up your own OID, afaik you need to register one
for your organization.

/joeyo

On Thu, Aug 28, 2008 at 4:04 PM, Brian Blater <brb.lists at gmail.com> wrote:
> Hey LUGers,
>
> I'm getting started on a Proof of Concept here at $WORK where I would
> like to show the possibility of getting rid of our MS SBS boxes and
> putting a Linux server in place to show we can have the same
> functionality etc but get more bang for the buck.
>
> I've setup one of our Dell servers with Ubuntu Hardy Server and have
> installed DHCP, DNS, Postfix, Apache, PHP, MySQL, Samba, Webmin and
> LDAP. So far so good. I've been working on the LDAP database and
> getting everything to work with that. One issue that came up with LDAP
> is the ability to disable a user account. We don't immediately delete
> a user account, but disable it for a time and then later delete it. I
> have looked for something in LDAP to mark an account as disabled but
> for the life of me I can't find anything. My Google searches didn't
> turn up anything that logically worked (maybe I was just looking for
> the wrong terms.)
>
> Anyways, I believe there are several of you out there that have setup
> account management using LDAP and I'm wondering how you have been able
> to disable an account? Thanks for any help you can give me as I try to
> get make Linux more visible in our organization.
>
> Thanks,
> Brian
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>