[389-users] Re: Auto add attributes when entries are created

2018-11-19 Thread William Brown


> On 19 Nov 2018, at 09:30, Olivier JUDITH  wrote:
> 
> Thank you for your reply. 
> 
> I'm not a C developer and i prefer Python but i'll try to write my plugin.
> It's a challenge for me I started to read plugins development documentation 
> on Redhat page.
> From  my understanding i have to call SLAPI_PLUGIN_POST_ADD_FN , right ?. 

It’s a bit more than that. You have to call that function to register your 
function pointer. After that our server framework will call your function many 
times (threaded so in parallel too!). There is some more boilerplate around it 
too, but that’s the core of it, yes.

Also I’d probably do this as a “SLAPI_PLUGI_PRE_ADD_BETXN_FN”. That means it 
happens before the entry is commited to the database, and it happens within the 
write transaction so it’s properly able to be rolled back and such. We’d need 
to work out how to make the schema check pass for this situation however … 
(SLAPI_PLUGIN_PRE_ADD_FN could be before schema enforcement?).

> 
> If a use CoS template can i add a specific value.  I would like to add a 
> generated value into this attributes.

CoS allows you to add a specific value to any entry matching a filter 
condition. So I think this may do exactly what you want. The only difference is 
CoS is “in memory” so all servers must be configured the same way to support it.

> 
> I'll come back to you for your advises. 
> 
> Thank again !!
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

—
Sincerely,

William


___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org


[389-users] Re: Allow filters through PTA Plugin

2018-11-19 Thread William Brown


> On 20 Nov 2018, at 03:13, Olivier JUDITH  wrote:
> 
> Hi,
> 
> It is possible . i'm using Pam PTA to authenticate AD user from SSO 
> application. 
> it works perfectly. the configurationis SSO app +> 389 + SSSD -> AD 
> As mentionned by Mark Reynolds use PAM PTA and filter with pamFilter . 

As a note, remember that SSSD is single threaded and may become a performance 
bottleneck. You could have to consider horizontal RO replica to scale your 
logins. 

> 
> Contact me if you need more information.

If you want to write up a how-to for our website that would be great, I’d help 
review it and get it commited

> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

—
Sincerely,

William


___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org


[389-users] Re: Allow filters through PTA Plugin

2018-11-19 Thread Olivier JUDITH
Hi,

It is possible . i'm using Pam PTA to authenticate AD user from SSO 
application. 
it works perfectly. the configurationis SSO app +> 389 + SSSD -> AD 
As mentionned by Mark Reynolds use PAM PTA and filter with pamFilter . 

Contact me if you need more information.
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org