On 31 Aug 2019, at 09:24, Janet Houser houser@nso.edu wrote:

Hi Mark,

On Aug 30, 2019, at 12:42 PM, Mark Reynolds mreynolds@redhat.com wrote:

...

On 8/30/19 1:02 PM, Janet Houser wrote:

...

Hi Folks,

I've just started to play with the "Directory Server Gateway" options to add users and groups. One think I've noticed is that the default user form doesn't have a way to enable "NT User" or "Posix User" attributes or the ability to add info for the supporting fields (e.g. uid, gid, home directory, etc.).

I've been looking at the following fedoraproject pages:

https://directory.fedoraproject.org/docs/389ds/administration/dsgw.html

and

https://directory.fedoraproject.org/docs/389ds/administration/webapps-instal...

But I can't seem to find a place where it tells me how to add these options to the page via the dsgw.conf or pb.conf files.

Can you point me to some resources that might help me understand how to add these options to the ds-389 web portal?

Well its unfortunate you just discovered this sample application. And it "was" a sample application. It was never meant to be supported or used in a production environment. That being said, it was deprecated well over a year ago, and it will completely removed in the Fedora 31, RHEL8, and CentOS8. There are no customization docs on it that I am aware of beside what you already found on the wiki, and I don't know anyone who still remembers anything about it or how to customize it.

Thanks for responding so quickly. And...... I have a gift for finding apps I need that are no longer supported :-)

We all have our challenges in life to bear.

I think that you found this application indicates we have an issue where we are miscommunicating or advertising software that shouldn't be - I think perhaps we should look into this.

How did you find the gateway and the sample application? What led you to think they were available (so that we can remove or modify these references)?

Are there any plans to implement a web interface to 389-DS? I ask because we'd like a way to allow junior members of the team to make accounts without giving them access to the OS of the server and full control of the 389 console.

There are current discussions within SUSE about initiating this as we require similar. 389 DS has an admin portal via cockpit, but not an ldap self service that most orgs would like to see. We have had many requests for self-service webui and I think we should supply one as an upstream project.

I would happily mentor and coordinate if you were interested, but the likely path forward would be flask + lib389 to enable something like this. As with anything, time is the barrier to many things and my current time is being put into container development aspects of the project.

In the mean time, you could use the CLI tools to achieve this for the junior members, but they also may need some extension to achieve what you would like.

Have a great holiday weekend.

*sigh* no holidays here for me. :)

Cheers,

...

Sorry, Mark

...

Thanks,

j

---

389-users mailing list -- 389-users@lists.fedoraproject.org

To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject....

--

389 Directory Server Development Team

---

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject....

— Sincerely,

William Brown

Senior Software Engineer, 389 Directory Server SUSE Labs