Hi,

I'm looking for an LDAP Administration front end with the following 
capabilities, and I'm wondering if LAM can fulfil these:


1.       I need to have the ability to specify different administrator accounts 
for different parts of the LDAP directory, and only allow the relevant admin 
account to access that part of the subtree. For instance, if I have two 
customers (Customer1 and Customer2), each with users and groups, I want to be 
able to allow only a particular admin account to create/read/update/delete 
users for each customer. It looks to me as if I could achieve this through 
creating two different profiles with different admin users, and then set the 
LDAP user search paths to different parts of the directory for each profile, 
does this sound workable?


I was thinking of an LDAP structure something like the following:

dc=root (objectClass=domain)
   - dc=<customer_name>
      - ou=Groups (objectClass=organizationalUnit)
         - cn=<group_name> (objectClass=groupOfNames)
      - ou=People (objectClass=organizationalUnit)
         - cn=<user_name> (objectClass=organizationalUser)
   - dc=<customer_name>
      - ou=Groups (objectClass=organizationalUnit)
         - cn=<group_name> (objectClass=groupOfNames)
      - ou=People (objectClass=organizationalUnit)
         - cn=<user_name> (objectClass=organizationalUser)



2.       I want users to be able to reset their password when they forget it.

Thanks very much,
Chris.

_____________________________________________________________________ 

This email is intended only for the use of the individual or entity named above 
and may contain information that is confidential and/or privileged. If you are 
not the intended recipient, you are hereby notified that any dissemination, 
distribution or copying of this Email is strictly prohibited. If you have 
received this Email in error, please notify us immediately by return email or 
telephone +61 2 9966 1066 and destroy the original message. Thank You
_______________________________________________________________________
------------------------------------------------------------------------------
Presto, an open source distributed SQL query engine for big data, initially
developed by Facebook, enables you to easily query your data on Hadoop in a 
more interactive manner. Teradata is also now providing full enterprise
support for Presto. Download a free open source copy now.
http://pubads.g.doubleclick.net/gampad/clk?id=250295911&iu=/4140
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to