I created a new partition, and copied Users and Groups from System into it,
the entire tree beneath those elements.

 

I added a user (hboggart) by adding an inetOrgPerson entry to ou=users as
follows. 

 

cn=Henry+sn=Bogart+givenName=Henry+uid=hbogart+mail=hbog...@geemail.com+mobi
leTelephoneNumber=555-555-555,ou=users,dc=deadbeef,dc=com

 

1.       So what should the canonical name (cn) above be? Should it be my
firstname, or my login id?

2.       I used uid as my login ID, is this a best practice? 

3.       I used sn as my last name (surname) but I see fields for Given Name
and surname (why is this stuff so unclear?)

4.       I want to add a json object for custom properties to this user -
which entry should I use?

 

I then added the user to the ready-made group cn=Administrators which is a
groupOfUniqueNames and now I have no idea how to add a the user cmdematos to
this.

I find all manner of conflicting information about this on the web, people
mention 'add a member attribute then add the members as values', but when I
try adding a member attribute I get .

 



 

So instead I added an account entry. It accepts this, but I have no idea
whether this is correct.

 



 

 

Where can I go to get a succinct explanation on the schemas and how to
construct user and groups entries?

 

What schemas should I use and how will this affect code that works with the
schemas? 

 

The purpose of the LDAP install is as follows:

 

1.       To Serve as a central Authentication and Authorization service for
Commercial Software Offerings (Team Source, Jira, Sonatype Nexus etc)

2.       To serve as Authentication and Authorization for custom software
development (OAUTH, Kerberos and LDAP)

3.       To handle multiple domains of authentication and authorization.

 

I really in the blind here and am hoping to avoid weeks of reading the
driest, most boring stuff known to man (X.500 and LDAP schemas) just to
learn the high level of what I am trying to do.

 

Any good articles or cookbook recommendations are very much appreciated. 

 

 

 

Reply via email to