LDAP Authentication Client

Registered by Rick Clark

Currently, in Ubuntu and Debian the packages libpam-ldap and libnss-ldap create separate configuration files and secret files. A ldap-auth-config package will be created that owns /etc/ldap.conf and /etc/ldap.secret. libpam-ldap and libnss-pam will depend on ldap-auth-config. An ldap-auth-config meta package will be created that depends on libpam-ldap, libnss-ldap. The ldap-auth-client meta source package will contain the ldap-auth-config package.

Blueprint information

Status:
Complete
Approver:
Martin Pitt
Priority:
Undefined
Drafter:
Rick Clark
Direction:
Needs approval
Assignee:
Rick Clark
Definition:
Approved
Series goal:
Proposed for gutsy
Implementation:
Implemented
Milestone target:
milestone icon tribe-4
Started by
Rick Clark
Completed by
Rick Clark

Related branches

Sprints

Whiteboard

2007/07/16 (stephan-implinux): check https://code.launchpad.net/~stephan-impilinux/network-authentication/authtool - a lot of work has gone into a ldap-auth frontend already, and we are actively working on it

2007/07/16 (dendrobates): This effort is aimed at fixing the base packages and while it might require minor code changes in UI's, it should not confict with them.

2007/07/17 (stephan-impilinux): I would appreciate being consulted on the final debconf configuration values. If we can make sure that the basic options are correctly covered (like enable TLS support) then I can adapt authtool to just invoke debconf and work with your packages.

2007/07/17 (PaulSchulz): I am confused by the package dependency and the meta package. Does this package exist yet? Should it be called ldap-auth-client-meta? (Maybe this just needs a little more clarification in the blueprint.)

2007/07/21 (pixelpapst): since people seem to repeatedly have problems with nss-ldap/nscd/udev, I suggest also having a look at nss-ldapd, which has a potentially more robust architecture.

2007/07/24 (pitti): added some questions to the spec (search for "pitti:"); please resolve; thank you!

2007/08/03 (pitti): I like the much more conservative handling of existing configuration. This is mainly useful for new installs anyway. Approved now.

(?)

Work Items