WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

auto delete module

This commit is contained in:
Roland Gruber 2018-06-30 11:02:40 +02:00
parent 31862c5bc5
commit 5c796f84ec
6 changed files with 147 additions and 56 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lam/HISTORY
View File

@ -1,4 +1,6 @@
September 2018 6.5
- LAM Pro:
-> Auto deletion of entries with dynamic directory services support (requires PHP 7.2).
- Fixed bugs:
-> Issue during uppercase login modification (#197)

131
lam/docs/manual-sources/appendix-schema.xml
View File

@ -14,7 +14,7 @@
<tgroup cols="6">
<thead>
<row>
<entry></entry>
<entry/>
<entry>Account type</entry>
@ -32,7 +32,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_unix.png" />
<imagedata fileref="images/schema_unix.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -53,7 +53,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_inetOrgPerson.png" />
<imagedata fileref="images/schema_inetOrgPerson.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -65,13 +65,13 @@
<entry>Part of OpenLDAP installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_samba.png" />
<imagedata fileref="images/schema_samba.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -83,13 +83,13 @@
<entry>Part of Samba tarball (examples/LDAP/samba.schema)</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_samba.png" />
<imagedata fileref="images/schema_samba.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -97,17 +97,17 @@
<entry>user, group, computer</entry>
<entry></entry>
<entry/>
<entry>Samba 4 built-in</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_kolab.png" />
<imagedata fileref="images/schema_kolab.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -119,13 +119,13 @@
<entry>Part of Kolab 2/3 installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_asterisk.png" />
<imagedata fileref="images/schema_asterisk.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -137,13 +137,13 @@
<entry>Part of Asterisk installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_pykota.png" />
<imagedata fileref="images/schema_pykota.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -156,13 +156,13 @@
<entry>Part of PyKota installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_mailAlias.png" />
<imagedata fileref="images/schema_mailAlias.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -174,13 +174,13 @@
<entry>Part of OpenLDAP installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_hostObject.png" />
<imagedata fileref="images/schema_hostObject.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -198,7 +198,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_authorizedServices.png" />
<imagedata fileref="images/schema_authorizedServices.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -210,13 +210,13 @@
<entry>Part of libpam-ldap installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_mailAlias.png" />
<imagedata fileref="images/schema_mailAlias.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -228,13 +228,13 @@
<entry>Part of OpenLDAP installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_mailAlias.png" />
<imagedata fileref="images/schema_mailAlias.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -253,7 +253,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_mac.png" />
<imagedata fileref="images/schema_mac.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -265,13 +265,13 @@
<entry>Part of OpenLDAP installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_ipHost.png" />
<imagedata fileref="images/schema_ipHost.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -289,7 +289,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_puppet.png" />
<imagedata fileref="images/schema_puppet.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -303,13 +303,13 @@
url="https://github.com/puppetlabs/puppet/blob/master/ext/ldap/puppet.schema">Puppet
on GitHub</ulink></entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_eduPerson.png" />
<imagedata fileref="images/schema_eduPerson.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -322,13 +322,13 @@
<entry><ulink
url="http://middleware.internet2.edu/eduperson/">http://middleware.internet2.edu</ulink></entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_user.png" />
<imagedata fileref="images/schema_user.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -340,13 +340,13 @@
<entry>Part of OpenLDAP installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_ssh.png" />
<imagedata fileref="images/schema_ssh.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -359,13 +359,13 @@
<entry>Included in patch from <ulink
url="http://code.google.com/p/openssh-lpk/">http://code.google.com/p/openssh-lpk/</ulink></entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_quota.png" />
<imagedata fileref="images/schema_quota.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -379,13 +379,13 @@
url="http://sourceforge.net/projects/linuxquota/">Linux
DiskQuota</ulink></entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_group.png" />
<imagedata fileref="images/schema_group.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -403,7 +403,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_group.png" />
<imagedata fileref="images/schema_group.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -421,7 +421,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_dhcp.png" />
<imagedata fileref="images/schema_dhcp.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -440,7 +440,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_bind.png" />
<imagedata fileref="images/schema_bind.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -460,7 +460,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_alias.png" />
<imagedata fileref="images/schema_alias.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -478,7 +478,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_netgroup.png" />
<imagedata fileref="images/schema_netgroup.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -490,13 +490,13 @@
<entry>Part of OpenLDAP installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_nisObject.png" />
<imagedata fileref="images/schema_nisObject.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -514,7 +514,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_nisObject.png" />
<imagedata fileref="images/schema_nisObject.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -532,7 +532,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_oracle.png" />
<imagedata fileref="images/schema_oracle.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -553,7 +553,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_ppolicy.png" />
<imagedata fileref="images/schema_ppolicy.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -571,7 +571,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_freeRadius.png" />
<imagedata fileref="images/schema_freeRadius.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -583,13 +583,13 @@
<entry>Part of FreeRadius installation</entry>
<entry></entry>
<entry/>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_heimdal.png" />
<imagedata fileref="images/schema_heimdal.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -607,7 +607,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_mitKerberos.png" />
<imagedata fileref="images/schema_mitKerberos.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -625,7 +625,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_sudo.png" />
<imagedata fileref="images/schema_sudo.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -643,7 +643,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_kopano.png" />
<imagedata fileref="images/schema_kopano.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -662,7 +662,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_zarafa.png" />
<imagedata fileref="images/schema_zarafa.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -680,7 +680,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_mailAlias.png" />
<imagedata fileref="images/schema_mailAlias.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -698,7 +698,7 @@
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_nsview.png" />
<imagedata fileref="images/schema_nsview.png"/>
</imageobject>
</inlinemediaobject></entry>
@ -712,6 +712,25 @@
<entry>LAM Pro only</entry>
</row>
<row>
<entry><inlinemediaobject>
<imageobject>
<imagedata fileref="images/schema_autoDelete.png"/>
</imageobject>
</inlinemediaobject></entry>
<entry>All</entry>
<entry>dynamicObject</entry>
<entry>built-in with DDS module</entry>
<entry>Part of LDAP server installation</entry>
<entry>LAM Pro only, requires DDS extension on LDAP server
side</entry>
</row>
</tbody>
</tgroup>
</table>

70
lam/docs/manual-sources/chapter-modules.xml
View File

@ -5792,6 +5792,76 @@ OK (10 msec)</programlisting>
</screenshot>
</section>
<section>
<title>Auto delete (LAM Pro)</title>
<para>This module allows to mark any new entry to be marked for auto
deletion. The cleanup is done by the LDAP server itself. Please note that
this will not delete any relations etc. in other entries (e.g. group
memberships).</para>
<para><emphasis role="bold">Requirements</emphasis></para>
<itemizedlist>
<listitem>
<para>PHP 7.2 or later: the module will not be shown if you use an
older PHP version since the required LDAP commands are not
supported.</para>
</listitem>
<listitem>
<para>LDAP server with DDS (Dynamic Directory Services) support: your
LDAP server needs to be configured to allow auto deletion of entries.
See e.g. <ulink
url="http://www.openldap.org/doc/admin24/overlays.html">OpenLDAP
configuration</ulink>.</para>
</listitem>
<listitem>
<para>Your user has the right to set a deletion date. This is
configured on your LDAP server via ACLs. E.g. OpenLDAP requires manage
rights to attribute "entryTtl".</para>
</listitem>
</itemizedlist>
<para><emphasis role="bold">Restrictions</emphasis></para>
<para>The maximum time for auto deletion is one year and six days. This is
a restriction by the DDS standard itself. The deletion date can be
extended for existing accounts but always by a maximum of one year and six
days.</para>
<para>You should configure the maximum TTL value on your LDAP server as
default is often much less than a year.</para>
<para>A deletion date on an existing entry cannot be removed but only be
extended.</para>
<para><emphasis role="bold">Configuration</emphasis></para>
<para>You can add the auto delete module to any account type.</para>
<para><graphic fileref="images/mod_autoDelete1.png"/></para>
<para><emphasis role="bold">Usage</emphasis></para>
<para>You can set a deletion time for any new account. Please note the
restrictions above. If you get an error about invalid TTL then you might
have exceeded the maximum TTL.</para>
<para>Existing accounts cannot be marked for deletion. But you may update
the deletion date on existing accounts that are already marked for
deletion.</para>
<para>Profile editor can be used to setup a default deletion time.</para>
<screenshot>
<graphic fileref="images/mod_autoDelete2.png"/>
</screenshot>
<para/>
</section>
<section>
<title>General information</title>

BIN
lam/docs/manual-sources/images/mod_autoDelete1.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 45 KiB

BIN
lam/docs/manual-sources/images/mod_autoDelete2.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 17 KiB

BIN
lam/docs/manual-sources/images/schema_autoDelete.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 1.1 KiB