Re: addUser question [rel 1.2]

Ezio Paglia <ezio-sOFouQoV90PFIYnzvfs/[email protected]> Fri, 07 Jul 2006 09:47:25 +0200
Newsgroups gmane.comp.isp.ispman.user
Organization Comune di Grosseto
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--------------010107040704080208030504
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Hi J=F6rg
thank you.

I think I used a wrong syntax; with the quote symbol (") in the -u and=20
-a option it work, I had tried without the quotes. The scripts=20
ispman.addUserAttributeValues and ispman.replaceUserAttributeValues=20
actually work.

Now I should correct my question, hoping I won't disturb too much,=20
because essentially it splits into 3 subquestions.

Is there something like ispman.deleteUserAttribute corresponding to the=20
ldifmodify with the delete (attribute) option ? It could be necessary=20
when a user wants to pass from our slow connection to internet to=20
another internet connection  without  renouncing to his mailbox with us.=20
Should I study the implementation of the replaceUserAttribute first ?

About the code in users.ldif.template you suggest to study
<perl>
        $text=3D"";
        if ($r->param("dialupAccess") && $r->param("dialupAccess") eq=20
"enabled"){
                $text=3D"dialupAccess: yes\n";
        }
        $text
</perl>
<perl>
        $text=3D"";
        if ($r->param("radiusProfileDN")) {
                $text=3D"radiusProfileDN: ". $r->param("radiusProfileDN")=
;
        }
        $text
</perl>
do you know how to alter it in order to have both attribute set in a=20
mass provisioning via ispman.addUser ? (Trivially one could lanch an=20
ispman.addUser plus a ispman.addUserAttributeValues, yet I think it is=20
not a good thing). I need to populate 2 domains, the former with a=20
default Dialup Access, the latter without and to follow the need of=20
security or connectivity of my users that may change from time to time.

My last question is about ldapmodify. Please excuse my lack of knowledge=20
about ldap. I apologize, it is not a question related to ispman, but due=20
to the way ldap is implemented for ispman (I tried to follow Tony Wasson=20
advices for Debian). However I do not know what to study and whether=20
there is a shortcut for the problem.
If  I try=20
# ldapmodify -f /tmp/modify.txt
it follows
SASL/DIGEST-MD5 authentication started
Please enter your password:
ldap_sasl_interactive_bind_s: Internal (implementation specific) error=20
(80)additional info: SASL(-13): user not found: no secret in database
Do you know how to let ldapmodify work for the ldap built by ispman ?
Ciao and thank you.
Ezio.

Joerg Delker ha scritto:

> Hi Ezio,
>
> you may alter the default attributes on user creation by modifying=20
> templates/users.ldif.template.
>
> Regarding your problem with ispman.addUserAttributeValues, please file=20
> a reproducible bug report on the project pages at sourceforge.
>
> Regards,
> J=F6rg
>
> Ezio Paglia wrote:
>
>> Hi everyone,
>>
>> In order to mass-convert email users from a passwd-shadow-popauth=20
>> qpopper configuration to an ispman 1.2 ldap , I used the=20
>> ispman.addUser syntax :
>>
>> ./ispman.addUser -d <domain name> -f <First Name> -l <Last Name> -h=20
>> <Server Name> -q <Quota> -p <password> username
>>
>> The users created through the ispman.addUser above have :
>>
>> Dialup Access disabled
>> Radius Profile nonexisting
>>
>> while I see that the users created ex-novo through the https client=20
>> have the following properties:
>>
>> Dialup Access enabled
>> Radius Profile default
>>
>> So, inside my ldap, I may have
>>
>> dialupAccess: yes
>> radiusProfileDn: cn=3Ddefault,ou=3Dradiusprofiles,o=3Dispman
>>
>> or nothing.
>>
>> Do you know what to do in order to have such attribute (and some=20
>> others) set ? (ispman.addUserAttributeValues -d <domain-name> -u=20
>> <username> -a radiusProfileDn cn=3Ddefault,ou=3Dradiusprofiles,o=3Disp=
man=20
>> does not work, it gives an error).
>>
>> Do you know whether it is possible for an admin (only with https=20
>> client) to switch for a user from a dialup configuration to a dialup=20
>> deny and viceversa.
>>
>> I could "slapcat" the ldap, edit it, add or destroy the missing 2=20
>> lines for the needed users and rebuild it, but I think it is not the=20
>> best way.
>>
>> Ciao and thanks
>> Yours Ezio.
>>


--------------010107040704080208030504
Content-Type: text/x-vcard; charset=utf-8;
 name="ezio.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
 filename="ezio.vcf"

begin:vcard
fn:Ezio Paglia
n:Paglia;Ezio
org:Comune di Grosseto;Servizio Elaborazione Dati
adr:;;Via Ginori;Grosseto;GR;58100;Italia
email;internet:ezio-sOFouQoV90PFIYnzvfs/[email protected]
title:Area Sistemi, Database, Demografici
tel;work:+39-0564-488706
tel;fax:056421139
tel;cell:3207984950
version:2.1
end:vcard


--------------010107040704080208030504
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--------------010107040704080208030504
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ispman-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ispman-users

--------------010107040704080208030504--