Ubuntu Wiki

Please check the status of this specification in Launchpad before editing it. If it is Approved, contact the Assignee or another knowledgeable person before making changes.

• Launchpad entry: https://features.launchpad.net/distros/ubuntu/+spec/edubuntu-network-auth-server

• Packages affected: edubuntu-server

Summary

Many schools we wish to deploy to manage their users and groups using LDAP. Currenly, Edubuntu doesn't fit into these environments easily, because we don't have automatic installation of tools that will enable this. If we wish to make a dent in these markets, we'll need this functionality.

Attendees

• sbalneav, ogra, moquist, rwiederman, eharrison, rnovo, pschroeder, dtrask, jhaltom , jammcq, amitchell, stgraber (VOIP)

Rationale

Use cases

• Dave

Scope

• provide single-sign on services for Linux/Windows/Mac OOTB
• provide at least basic failover (e.g., OpenLDAP Master/Slave)
• provide GUI user managment
• provide a single home directory for each user that can be accessed from any Linux/Windows/Mac client

Packages:

• smbldap-tools
• slapd/FDS(?)
• nscd
• libnss-ldap
• libpam-ldap

Design

Properly integrate http://www.majen.net/smbldap/ which is used widely in k12LTSP setups for user and group management into edubuntu.

Package and install http://edsadmin.sourceforge.net/ as maintenance tool for the above server setup.

Implementation

Code

Data preservation and migration

Unresolved issues

BoF agenda and discussion

BoF Notes:

• moquist has done much work on smbldap-installer, which installs and configures smbldap-tools with openLDAP. Prepend useradd, group tools with smbldap-, and CLI user management works as per normal. Goal will be to integrate smbldap-tools into edubuntu so it works out of the box.
• For caching, we'll want to make sure nscd is installed.
• For now, we'll only concern ourselves with dealing with other Edubuntu (smbldap-tools/openLDAP) servers. Feisty+1 we'll deal with true enterprise-level server considerations (e.g., failover) and AD integration.

* We may consider FDS instead of OpenLDAP; needs much discussion.

CategorySpec