[Andreas B. Mundt] > What is the plan? Who do you expect to make this decision?
> Almost since the beginning of this year we decide *not* to decide > anything at all concerning LDAP administration. I think this is fine > for some time, to see how things evolve. Given the lack of progress with alternatives cipux and lwat, and the fact that gosa is the only solution that is working thought it only partly solve our needs, I propose we decide that we drop lwat from squeeze, and bring gosa up to speed with our needs. For the specific LDAP setup, I believe we should change our Gosa setup to have a "flat" ldap directory (ie no students and teachers subtrees), and use the traditional three levels of administrative access (admin with full access, jr. admin with limited access and the rest with no special privileges. And if no-one else are ready to make the decision, I am happy to take it as the system architect of Debian Edu, but it require someone to actually implement the directory structure change and the access level change. With the flat structure and the three levels of access, we have not tied ourself too tight to gosa and should be able to migrate to other tools in the future, as well as making it possible for sites to use other tools if they want to. > As Petter already listed, we have 3 candidates: CipUX, GOsa and > lwat. (Or is there already another one approaching?) Given that cipux is not not present as a solution in Squeeze, lwat is broken and gosa is limping along, I believe we only have one realistic alternative - gosa. Not to happy with the home grown LDAP schemas gosa is using, but our hands seem tied and no sensible alternative have shown up this year. I expect us to have to maintain our own set of gosa packages in our own repository to get a version with support for netgroups and kerberos and the other things that are missing. I also hope we can get support for powerdns to avoid having to rewrite that part of the server setup. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
