Package: nslcd
Version: 0.9.6-3
Severity: wishlist
I would like for it to be possible to configure nslcd so that
getent.ldap(1) can return information not covered by the current maps.
Here are three use cases:
1. Alternate "home" directories. I'm in a company subdivision where
employees have departmental home directories, something like
map passwd homeDirectory "/home/$sAMAccountName"
where /home is NFS-mounted from our own server. But there is also
another set of homedirs, ones that are global to the company but are
tightly quota-bound and thus not as useful. I want to have an autofs
mount for these so that they are accessible, but I need to query a
"unixHomeDirectory" attribute in LDAP (homedirs are spread across
multiple servers so I can't just construct a path from the username)
and the "homeDirectory" slot is already spoken for.
For now, I am (ab)using the "userPassword" attribute in the "shadow"
map to get this information, but that's an awkward one-off at best.
2. User pictures. My company LDAP server has a "thumbnailPhoto"
attribute for each user, which is some kind of base64-encoded image
that is likely the same user photo shown in the Outlook mail client.
It would be lovely to show this as a "user picture" in LightDM, or
perhaps elsewhere in the Linux desktop, without needing to configure
a separate LDAP client to get at it.
3. Automount maps in general. An "automount" map is supported by
libnss-ldap, and while first-class support for this in libnss-ldapd
would be nice, I can foresee greater flexibility in being able to
specify multiple sources for automount definitions (e.g.
"automount1", "automount2", ...)