OpenLDAP Structure Tutorials

adamtheo · Posted: Thu Sep 04, 2003 4:22 am Post subject: OpenLDAP Structure Tutorials

Hello, all.

I finally have my OpenLDAP server running with TLS/SSL support, but am now trying to figure out how to structure and organize the actual users that will be in the directory. I am looking for good beginner's tutorials on how to structure and organize a LDAP directory, involving subjects as LDIF files and schemas.

But, if there are people here who are familiar with LDAP and setting up LDAP directories from scratch, and are willing to help guide me, here is what I'm trying to do:

I will have a large, constantly fluctuating userbase of users who will control their own data (even control their own passwords, since I can't afford to maintain them all the time). These users will all have TWiki, email, and Jabber accounts that will authenticate against this directory.

In addition, there will be a few of those users who I will grant extra priveleges to. These extra priveleges will vary, based on what role they will be serving. Some users may fill multiple roles, but if that would be difficult I can alter this.

I did start by creating a organizationalUnit for "users", and then another organizationalUnit for each of the roles that some will serve in: "members", "admins", "project leaders", and "employees". But then it seemed that I had to create "groups" under each of those organizationalUnits to group those users into roles and priveleges. It seems that all I need are these groups, with no organizationalUnits since effectively I'll just have those two levels of hierarchy for all my users.

Thanks for any help.
_________________
* Theoretic Solutions "The Internet's Open Think-Tank" - http://www.theoretic.com

adamtheo · Posted: Thu Sep 04, 2003 6:07 pm Post subject:

i hate to do this, but "bump".
_________________
* Theoretic Solutions "The Internet's Open Think-Tank" - http://www.theoretic.com

lorenb · Posted: Thu Sep 04, 2003 6:32 pm Post subject:

You might want to check out directory-administrator http://diradmin.open-it.org/index.php

adamtheo · Posted: Thu Sep 04, 2003 7:45 pm Post subject:

Yes, I use directory administrator. I know how to add and manage users and groups. What I'm trying to get advise on is how to structure and organize my users. Suggestions from experienced administrators on avoiding growing pains, make administrating and growing easier, etc...

But thanks anyway.
_________________
* Theoretic Solutions "The Internet's Open Think-Tank" - http://www.theoretic.com