Changes between Version 20 and Version 21 of LdapPlugin

Timestamp:

Oct 21, 2006, 11:53:14 PM (18 years ago)

Author:

Emmanuel Blot

Comment:

Document the new feature introduced in 0.4.4

LdapPlugin

@@ -24 +24 @@
 [http://python-ldap.sourceforge.net/ python-ldap].[[BR]] LdapPlugin has been 
 tested on a Debian Linux Sarge/Sid (2.4.x and 2.6.x) server, a Windows XP SP2 workstation,  
-as well as on MacBook Pro OS 10.4.7, all of them running Python 2.4 with Trac 'development' releases.
+as well as on !MacBookPro OS 10.4.8, all of them running Python 2.4 with Trac 'development' releases.
 
 To use the egg file you need to have 
@@ -60 +60 @@
 web site.
 
-Here is an example of a typical LDAP section of an Apache2 configuration file:
+=== Apache 2.0 ===
+
+Here is an example of a typical LDAP section of an Apache2.0 configuration file:
 
 {{{
@@ -151 +153 @@
 # group permissions are managed as addition/removal to the LDAP directory groups
 manage_groups = true
+# whether a group member contains the full dn or a simple uid
+groupmemberisdn = true
 }}}
 
@@ -333 +337 @@
 your LDAP directory.
 
+==== Group of names ====
+
+There are usually two flavours to manage group permissions in LDAP:
+ 1. The group contains a list of fully qualified dns
+{{{
+dn: cn=fakedoctors,ou=groups,dc=example,dc=org
+cn: fakedoctors
+objectClass: groupOfNames
+objectClass: top
+member: uid=meredith,ou=groups,dc=example,dc=org
+member: uid=georges,ou=groups,dc=example,dc=org
+member: uid=izzie,ou=groups,dc=example,dc=org
+}}}
+   With such an environment, your [ldap] section would contain
+{{{
+[ldap]
+...
+group_rdn = ou=groups
+groupmemberisdn = true
+groupname = groupofnames
+groupmember = member
+}}}
+ 1. The group contains a list of simple uids
+{{{
+dn: cn=fakedoctors,ou=groups,dc=example,dc=org
+cn: fakedoctors
+objectClass: posixGroup
+objectClass: top
+memberUid: uid=meredith
+memberUid: uid=georges
+memberUid: uid=izzie
+}}}
+   With such an environment, your [ldap] section would contain
+{{{
+[ldap]
+...
+group_rdn = ou=groups
+groupmemberisdn = false
+groupname = posixgroup
+groupmember = memberUid
+}}}
+
 === Global vs. Environment permissions ===
 
@@ -440 +486 @@
  * '''v0.4.2''': Fix up an important issue with the management of the caches. The plugin has also been tested with the [trac:wiki:WebAdmin WebAdmin] plugin.
  * '''v0.4.3''': Fix up two issues with authentication (an invalid user identifier was sent to the LDAP server)
+ * '''v0.4.4''': Enable support for posix groups (and group members w/o distinguish name)
 
 == Author/Contributors ==
 
 '''Author:''' [wiki:eblot eblot] [[BR]]
-'''Contributors:''' wichert#wiggy.net
+'''Contributors:''' wichert#wiggy.net, nguyen.antoine#wanadoo.fr
 
 [[TagIt(eblot,0.10,plugin)]]