Re: ldap group names / how to add them

Andreas,

the missing group name resolution is due to the missing objectclass 
"posixGroup" in the ispmanDomain objects.
LDAP V3 constraints prevents us from simply adding this objectclass to 
the domain entries (for a detailed discussion see the mailarchive).

This problem was already fixed in the upcoming 1.3 version (in CVS 
HEAD), by adding seperate posixGroup entries.

Joerg


Andreas John wrote:
> Hello List!
> 
> I switched to suphp on our apache(s), which requires the group of the 
> xy.php file to exist. With ISPMAN/LDAP there the shell does only expand 
> UIDs to the names. I think that's because there is no attribute for the 
> group's name in the ldap tree. May someone show mercy and add such a 
> attribute? Or could I map the uidName to gidNumber (as workaround) in 
> nssswitch.conf, i.e. the group's name is the same as the user's name?
> 
> As a workaround for now I created a shellscript I want to share with you 
> all:
> 
> -----
> # cat /usr/local/sbin/ispman.ldapaddgroups
> #!/bin/sh
> 
> GROUPLIST=`ldapsearch -P 3 -LLL -s sub -b "o=ispman" -x -LLL -y 
> /etc/ldap.secret -D "cn=Directory Administrator, o=ispman" 
> "objectClass=ispmanVirtualHost" gidNumber | grep gidNumber | sed -e 
> "s/gidNumber: \([0-9]*\)$/\1/g"`
> 
> for i in `echo $GROUPLIST`; do
>  if [ -z `grep ispmangroup$i /etc/group` ]; then
>  echo adding group $i to /etc/group
>  echo "ispmangroup$i:x:$i:" >> /etc/group;
>  fi
> done
> -----
> 
> Make sure that the LDAP access works with ldapsearch this way! Then put 
> the scipt to the crontab ;)
> 
> 
> Best Regards,
> j.
>

begin:vcard
fn:Joerg Delker
n:Delker;Joerg
email;internet:[email protected]
x-mozilla-html:FALSE
version:2.1
end:vcard