RE: [Zope] Re: Novell NDS (Was: LDAPUserFolder and Zope 2.5.1)
Has anyone done anything to connect to a Netscape Directory? I understand its LDAP also but I know next to nothing about it or LDAP in general for that matter. I have all the server, port, user, etc. info but just don't know how to go about getting data out of it. Thanks -Allen -----Original Message----- From: Brad Clements [mailto:bkc@murkworks.com] Sent: Wednesday, May 08, 2002 1:56 PM To: Zope user list Subject: [Zope] Re: Novell NDS (Was: LDAPUserFolder and Zope 2.5.1) On 8 May 2002 at 11:44, Tille, Andreas wrote:
On Tue, 7 May 2002, Brad Clements wrote:
I'm using LDAPUserFolder to talk to eDirectory running on Linux.. Works fine. Sorry, I'm talking about the NDS which is (IMHO) bundled with Novell 5.
It's the same thing. NDS == eDirectory. Wether or not it's running on NetWare or Linux doesn't matter. Brad Clements, bkc@murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax AOL-IM: BKClements _______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
The most important thing is the searchbase of your users and groups in the NscpDS. example: LDAP base directory: o=your-domain.net Sub directories: ou=Users ou=Groups the searchbase for Users is called: ou=Users,o=RHG the searchbase for Groups is called: ou=Groups,o=RHG The second thing you need to know is details about Users and Groups. For NscpDS: login attribute for Users is uid (objectclass: top,person) name attribute of Groups is cn (objectclass: groupOfUniqueNames, groupOfNames) make a group called cn=Manager and put a user into this group. enter all infos into the LDAPUserFolder (best as superuser), do manage_zmi_logout and login as the LDAP-user Hope this helps you Dirk "Schmidt, Allen J." schrieb:
Has anyone done anything to connect to a Netscape Directory? I understand its LDAP also but I know next to nothing about it or LDAP in general for that matter. I have all the server, port, user, etc. info but just don't know how to go about getting data out of it.
Thanks
-Allen
-----Original Message----- From: Brad Clements [mailto:bkc@murkworks.com] Sent: Wednesday, May 08, 2002 1:56 PM To: Zope user list Subject: [Zope] Re: Novell NDS (Was: LDAPUserFolder and Zope 2.5.1)
On 8 May 2002 at 11:44, Tille, Andreas wrote:
On Tue, 7 May 2002, Brad Clements wrote:
I'm using LDAPUserFolder to talk to eDirectory running on Linux.. Works fine. Sorry, I'm talking about the NDS which is (IMHO) bundled with Novell 5.
It's the same thing. NDS == eDirectory. Wether or not it's running on NetWare or Linux doesn't matter.
Brad Clements, bkc@murkworks.com (315)268-1000 http://www.murkworks.com (315)268-9812 Fax AOL-IM: BKClements
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
dirk gave a simple example, but here is a general rule: <rant> using LDAP in general is not easy unless you know what you are doing! it is not straightforward like connecting to a database and issuing SQL! using LDAP for zope authentication requires knowledge about how LDAP works and how the directory is structured! </rant> if you're just curious or playing around and have no real need for it, have fun... if you must use it you should familiarize yourself with LDAP. knowing "next to nothing" about LDAP is not helpful when you have to face the multitude of configuration options that are exposed by products written for LDAP authentication, such as the LDAPUserFolder. jens On Wednesday, May 8, 2002, at 02:32 , Dirk Datzert wrote:
The most important thing is the searchbase of your users and groups in the NscpDS.
example:
LDAP base directory: o=your-domain.net Sub directories: ou=Users ou=Groups
the searchbase for Users is called: ou=Users,o=RHG the searchbase for Groups is called: ou=Groups,o=RHG
The second thing you need to know is details about Users and Groups. For NscpDS: login attribute for Users is uid (objectclass: top,person) name attribute of Groups is cn (objectclass: groupOfUniqueNames, groupOfNames)
make a group called cn=Manager and put a user into this group.
enter all infos into the LDAPUserFolder (best as superuser), do manage_zmi_logout and login as the LDAP-user
Hope this helps you
Dirk
"Schmidt, Allen J." schrieb:
Has anyone done anything to connect to a Netscape Directory? I understand its LDAP also but I know next to nothing about it or LDAP in general for that matter. I have all the server, port, user, etc. info but just don't know how to go about getting data out of it.
Thanks
-Allen
participants (4)
-
Dieter Maurer -
Dirk Datzert -
Jens Vagelpohl -
Schmidt, Allen J.