On Thu, 2018-08-09 at 14:52 +0300, Maria Tsiolakki wrote: > Hello > We run ldap 389, here in a computer science department > We need to have an easy management tool for setup and manage ldap > accounts. Required functionalities among others are: > *query users based on criteria i.e, select all users that belong to > the same group, and easily update their gid , and at the same time > to update the corresponding group with the new additions
Do you mean the users posixGid for primary group? Or other? These days, it's probably better to use memberOf and the rfc2307bis schemas that SSSD support to work out group memberships. There are also grave security concerns with primary groups being shared between users (it's better to have a user-private-group as the private GID). > *batch import of multiple users at once > *select multiple users for deactivate/activate/delete? > etc > Has anybody uses such a tool, with above functionalities and even > more? Today I don't know of such a tool, but we are laying the ground work out for lib389 to be able to do this from the CLI, and then later a webui. Some people use PHP ldap admin, others develop their own scripts. Ansible might be able to do some parts too. I'd be really curious about what you end up doing here, and would love to hear back what you decide, as this is a big missing part of our ecosystem today. Thanks! -- Sincerely, William _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/N5QSNRUQ3GVWH4PT7R65LWDK4HUUKUVB/
