After struggling with LDAP for many hours with little success, I've decided that a more efficient way to accomplish my goals would be to pay someone to do what I've been unable to do. I've gotten my supervisor to approve a contract not to exceed $300 to accomplish these goals. My overall goal is to create an LDAP schema to store attributes of our staff, including some attributes unique to our organization, and to allow them to view sections of our intranet based on this information. The specific deliverables include:
1) Write or modify the schema available at http://www.jhuccp.org/temp/KZ/ccpperson.schema to store information on our staff. 2) Write a series of ldap commands (an LDIF file?) that will create a directory tree to store the information on our staff, including the attributes unique to our organization. I think that this includes creating Organizational Roles as needed. An example of the output of 'ldapsearch -x -b "dc=jhuccp,dc=org" "(objectclass=*)"' on our current tree is available at http://www.jhuccp.org/temp/KZ/ccp.ldif. 3) Write a stanza of an Apache config file to only allow users to view an area if they are a member of the 'CCPPerson' objectClass. An example of what's been tried so far is at http://www.jhuccp.org/temp/KZ/apache.config. 4) Write a second stanza of an Apache config file to only allow users to view an area if they have attributes ccpDivision = "HCP" and ccpDepartment = "Africa". These attributes have not yet been added to the ccpperson.schema above. This stanza is similar to the apache.config file above, for a directory like '/var/www/centernet/htdocs/staffonly/hcp/africa/'. Because this task is for a secure intranet server, the contractor will have to send me the files and I'll install and test them. No access to our server will be given. Our server is currently using Debian 3.1 with kernel 2.6.8-2-686-smp. It has correctly functioning versions of Apache 1.3.33 with mod_ldap and OpenLDAP 2.2.23. No upgrades of this software are possible. Anyone who would like to work on this project should write to me directly at 'kzembowe [at] jhuccp.org'. (Anyone who responds to the whole LDAP list will be automatically disqualified.) In your note, include what you would charge to accomplish these goals, and some way of judging your qualifications to do this work (LDAP systems you've written or managed, books you've written (?), note from your mom saying you're a good person, ...) Thanks for your interest in helping me. Please let me know if you need some other information to accurate assess the difficulty of this task. I look forward to hearing from folks. -Kevin Kevin Zembower Internet Services Group manager Center for Communication Programs Bloomberg School of Public Health Johns Hopkins University 111 Market Place, Suite 310 Baltimore, Maryland 21202 410-659-6139 --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
