My organization has made extensive use of the Directory Server (Web) Gateway (DSGW) for 20 years. I've yet to come across any suitable alternative (suggestions welcome if you're familiar with its functionality).
We are at least a decade behind with updates, having been tied to the Oracle fork of directory and mail server products until recently. I am now experimenting with potential conversion to 389-DS or RHDS including the updated DSGW, and I may have encountered a bug.
Is the DSGW still used and supported?
The specific problem appears to be the edit command (/usr/lib64/dirsrv/dsgw-cgi-bin/edit) failing to handle "syntax=mls" as encountered in a template file (/usr/share/dirsrv/dsgw/config/display-orgperson.html). The problem occurs if the attribute involved exists in the entry being edited, whether its value contains multiple lines or not.
The symptom: The multi-line data is displayed cleanly using the search or csearch commands, but upon clicking the Edit button to enter edit mode, the web form is truncated. Bottom half blank, from one cell above whatever cell contains "syntax=mls". In the distributed template file the trigger line is: <!-- DS_ATTRIBUTE "attr=postalAddress" "syntax=mls" "type=TEXTAREA" "cols=>40" "rows=>4" -->
The test environment: # uname -a Linux /host.domain/3.10.0-514.16.1.el7.x86_64 #1 SMP Wed Apr 12 15:04:24 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux # yum list | grep 389 Installed Packages 389-admin.x86_64 1.1.46-1.el7 @epel 389-admin-console.noarch 1.1.12-1.el7 @epel 389-admin-console-doc.noarch 1.1.12-1.el7 @epel 389-adminutil.x86_64 1.1.21-2.el7 @epel 389-console.noarch 1.1.18-1.el7 @epel 389-ds.noarch 1.2.2-6.el7 @epel 389-ds-base.x86_64 1.3.5.10-20.el7_3 @updates 389-ds-base-libs.x86_64 1.3.5.10-20.el7_3 @updates 389-ds-console.noarch 1.2.16-1.el7 @epel 389-ds-console-doc.noarch 1.2.16-1.el7 @epel 389-dsgw.x86_64 1.1.11-5.el7 @epel 389-adminutil-devel.x86_64 1.1.21-2.el7 epel 389-ds-base-devel.x86_64 1.3.5.10-20.el7_3 updates 389-ds-base-snmp.x86_64 1.3.5.10-20.el7_3 updates pcp-pmda-ds389.x86_64 3.11.3-4.el7 base pcp-pmda-ds389log.x86_64 3.11.3-4.el7 base
On Thu, 2017-06-22 at 16:30 -0800, Kreuzenstein, Luke (DOA) wrote:
My organization has made extensive use of the Directory Server (Web) Gateway (DSGW) for 20 years. I've yet to come across any suitable alternative (suggestions welcome if you're familiar with its functionality).
We are at least a decade behind with updates, having been tied to the Oracle fork of directory and mail server products until recently. I am now experimenting with potential conversion to 389-DS or RHDS including the updated DSGW, and I may have encountered a bug.
Is the DSGW still used and supported?
I don't think the code is well supported today. It's in a legacy maintenance mode as far as I know.
Can I ask how you are using DSGW so that we can work out if there is a better way you could interact with 389-ds? What are you trying to achieve with this process?
Thanks, hope to help you with this more,
William Brown wrote on 6/23/2017 3:12 PM:
On Thu, 2017-06-22 at 16:30 -0800, Kreuzenstein, Luke (DOA) wrote:
My organization has made extensive use of the Directory Server (Web) Gateway (DSGW) for 20 years. I've yet to come across any suitable alternative (suggestions welcome if you're familiar with its functionality).
We are at least a decade behind with updates, having been tied to the Oracle fork of directory and mail server products until recently. I am now experimenting with potential conversion to 389-DS or RHDS including the updated DSGW, and I may have encountered a bug.
Is the DSGW still used and supported?
I don't think the code is well supported today. It's in a legacy maintenance mode as far as I know.
Can I ask how you are using DSGW so that we can work out if there is a better way you could interact with 389-ds? What are you trying to achieve with this process?
Thanks, hope to help you with this more,
Thanks for the reply!
The directory in question is a central "master" repository that feeds/synchronizes to other systems including an MS AD. DSGW is the only interface we've made available for use by several hundred delegated departmental administrators to administer roughly 30000 accounts. The employee accounts are synced from a payroll system but any attributes not supplied by the payroll system, plus any non-employee accounts, such as for contractors, roles, services, shared mailboxes, etc, are created, edited, and deleted as needed using the DSGW. There were once several thousand groups also being administered via DSGW but we've whittled that down to a few dozen. End users will use the DSGW too, but typically just for read-only reference rather than an administrative tool.
Thanks for any suggestions. I know we could build some sort of replacement from scratch using a variety of programming tools if the motivation were strong enough, but I'm not intimately familiar with any such tools. The DSGW has been quite convenient, sufficient for the task, and surprisingly resilient. I keep waiting for some browser evolution to make it unusable, but 20 years and counting isn't a bad run.
On Fri, 2017-06-23 at 16:58 -0800, Kreuzenstein, Luke (DOA) wrote:
William Brown wrote on 6/23/2017 3:12 PM:
On Thu, 2017-06-22 at 16:30 -0800, Kreuzenstein, Luke (DOA) wrote:
My organization has made extensive use of the Directory Server (Web) Gateway (DSGW) for 20 years. I've yet to come across any suitable alternative (suggestions welcome if you're familiar with its functionality).
We are at least a decade behind with updates, having been tied to the Oracle fork of directory and mail server products until recently. I am now experimenting with potential conversion to 389-DS or RHDS including the updated DSGW, and I may have encountered a bug.
Is the DSGW still used and supported?
I don't think the code is well supported today. It's in a legacy maintenance mode as far as I know.
Can I ask how you are using DSGW so that we can work out if there is a better way you could interact with 389-ds? What are you trying to achieve with this process?
Thanks, hope to help you with this more,
Thanks for the reply!
Hey mate,
Sorry I missed this response.
The directory in question is a central "master" repository that feeds/synchronizes to other systems including an MS AD. DSGW is the only interface we've made available for use by several hundred delegated departmental administrators to administer roughly 30000 accounts. The employee accounts are synced from a payroll system but any attributes not supplied by the payroll system, plus any non-employee accounts, such as for contractors, roles, services, shared mailboxes, etc, are created, edited, and deleted as needed using the DSGW. There were once several thousand groups also being administered via DSGW but we've whittled that down to a few dozen. End users will use the DSGW too, but typically just for read-only reference rather than an administrative tool.
Thanks for any suggestions. I know we could build some sort of replacement from scratch using a variety of programming tools if the motivation were strong enough, but I'm not intimately familiar with any such tools. The DSGW has been quite convenient, sufficient for the task, and surprisingly resilient. I keep waiting for some browser evolution to make it unusable, but 20 years and counting isn't a bad run.
Browsers are very oddly compliant even to old standards :)
We have some plans in the works for a new webui for DS management - generally we hear that the self-service for users is pretty sought after as a feature, so we are considering it. I won't promise anything however because we still need to do the hardwork of writing it.
Recently we have been more focused on our python framework which you could use to interact with DS. Have a look here:
Hope that helps,
389-users@lists.fedoraproject.org
-
Kreuzenstein, Luke (DOA) -
William Brown