Changes between Version 15 and Version 16 of dSite/e0LDAP

Timestamp:

Oct 10, 2014, 9:38:27 PM (10 years ago)

Author:

ssugrim

Comment:

—

dSite/e0LDAP

@@ -170 +170 @@
 Next we will import initial content consisting of first groups and accounts that will be used as administrators for the range of services. The deployment assumes the following delegated accounting structure: users are organized into groups based on their organization or project (or in LDAP terms organizational units (OUs)). Each group can have number of administrators (or users with group management capabilities) but has to have one person who is the main administrator for the OU (the principal investigator - PI). While most of the account management is performed through Control Panel functions, the initial site administrator and the first OU need to be added to LDAP manually. This can be done through ''phpldapadmin'' or through LDIF configuration file and command line tools. The LDIF config for initial import looks like:
 {{{
-dn: ou=GENI,dc=geni,dc=net
+dn: ou=GENI,dc=geni,dc=rutgers,dc=edu
 objectClass: organizationalUnit
 objectClass: top
@@ -177 +177 @@
 businessCategory: Academic
 
-dn: cn=GENI,ou=GENI,dc=geni,dc=net
+dn: cn=GENI,ou=GENI,dc=geni,dc=rutgers,dc=edu
 objectClass: posixGroup
 cn: GENI
@@ -183 +183 @@
 gidNumber: 1001
 
-dn: uid=globaladmin,ou=GENI,dc=geni,dc=net
+dn: uid=globaladmin,ou=GENI,dc=geni,dc=rutgers,dc=edu
 objectClass: inetOrgPerson
 objectClass: posixAccount
@@ -208 +208 @@
 host: null.orbit-lab.org
 
-dn: cn=GENI-admin,ou=GENI,dc=geni,dc=net
+dn: cn=GENI-admin,ou=GENI,dc=geni,dc=rutgers,dc=edu
 objectClass: posixGroup
 cn: GENI-admin
@@ -214 +214 @@
 gidNumber: 1002
 
-dn: cn=admin,ou=GENI,dc=geni,dc=net
+dn: cn=admin,ou=GENI,dc=geni,dc=rutgers,dc=edu
 objectClass: organizationalRole
 objectClass: top
 cn: admin
-roleOccupant: uid=globaladmin,ou=GENI,dc=geni,dc=net
+roleOccupant: uid=globaladmin,ou=GENI,dc=geni,dc=rutgers,dc=edu
 }}}
-Typically you will needs to replace:
- 1. Every occurrence of DN base in the file (i.e. do a global replace of '''dc=geni,dc=net''' with corresponding DN e.g. '''dc=rutgers,dc=edu''')
+Typically you will need to replace:
+ 1. Every occurrence of DN base in the file (i.e. do a global replace of '''dc=geni,dc=net''' with corresponding DN e.g. '''dc=geni,dc=rutgers,dc=edu''' as was done in the example above)
  1. Initial group/organization name (i.e. do a global replace of '''GENI'' with the group name e.g. '''Rutgers''')
  1. Personalize administrator account entries under ''''sn:''','''givenName:''','''mail:''' and '''userPassword:'''