WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

docs update

This commit is contained in:
Roland Gruber 2016-11-05 12:13:14 +01:00
parent 55f0964710
commit 82c579e56e
1 changed files with 472 additions and 449 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

145
lam/docs/manual-sources/howto.xml
View File

@ -2078,25 +2078,25 @@ mysql> GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
password expires.</para> password expires.</para>
<para>You need to activate the PPolicy module for users to be able <para>You need to activate the PPolicy module for users to be able
to add this job. The job can be added multiple times (e.g. to send a to add this job. The job can be added multiple times (e.g. to send
second warning at a later time).</para> a second warning at a later time).</para>
<para>LAM calculates the expiration date based on the last password <para>LAM calculates the expiration date based on the last
change and the assigned password policy (or the default policy) password change and the assigned password policy (or the default
using attributes pwdMaxAge and pwdExpireWarning.</para> policy) using attributes pwdMaxAge and pwdExpireWarning.</para>
<para>Examples:</para> <para>Examples:</para>
<para>Warning time (pwdExpireWarning) = 14 days, notification period <para>Warning time (pwdExpireWarning) = 14 days, notification
= 10: LAM will send out the email 24 days before the password period = 10: LAM will send out the email 24 days before the
expires</para> password expires</para>
<para>Warning time (pwdExpireWarning) = 14 days, notification period <para>Warning time (pwdExpireWarning) = 14 days, notification
= 0: LAM will send out the email 14 days before the password period = 0: LAM will send out the email 14 days before the
expires</para> password expires</para>
<para>No warning time (pwdExpireWarning), notification period = 10: <para>No warning time (pwdExpireWarning), notification period =
LAM will send out the email 10 days before the password 10: LAM will send out the email 10 days before the password
expires</para> expires</para>
<screenshot> <screenshot>
@ -2115,7 +2115,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -2176,12 +2177,12 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<para>Wildcards:</para> <para>Wildcards:</para>
<para>You can enter LDAP attributes as wildcards in the form <para>You can enter LDAP attributes as wildcards in the form
@@ATTRIBUTE_NAME@@. E.g. to add the user's common name use "@@cn@@". @@ATTRIBUTE_NAME@@. E.g. to add the user's common name use
For the common name it would be "@@cn@@".</para> "@@cn@@". For the common name it would be "@@cn@@".</para>
<para>There are also two special wildcards for the expiration date. <para>There are also two special wildcards for the expiration
@@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g. "31.12.2016". date. @@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g.
@@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g. "31.12.2016". @@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g.
"2016-12-31".</para> "2016-12-31".</para>
</section> </section>
@ -2269,12 +2270,12 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<para>Wildcards:</para> <para>Wildcards:</para>
<para>You can enter LDAP attributes as wildcards in the form <para>You can enter LDAP attributes as wildcards in the form
@@ATTRIBUTE_NAME@@. E.g. to add the user's common name use "@@cn@@". @@ATTRIBUTE_NAME@@. E.g. to add the user's common name use
For the common name it would be "@@cn@@".</para> "@@cn@@". For the common name it would be "@@cn@@".</para>
<para>There are also two special wildcards for the expiration date. <para>There are also two special wildcards for the expiration
@@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g. "31.12.2016". date. @@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g.
@@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g. "31.12.2016". @@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g.
"2016-12-31".</para> "2016-12-31".</para>
</section> </section>
@ -2284,21 +2285,21 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<para>This will send your users an email reminder before their <para>This will send your users an email reminder before their
password expires.</para> password expires.</para>
<para>You need to activate the Shadow module for users to be able to <para>You need to activate the Shadow module for users to be able
add this job. The job can be added multiple times (e.g. to send a to add this job. The job can be added multiple times (e.g. to send
second warning at a later time).</para> a second warning at a later time).</para>
<para>LAM calculates the expiration date based on the last password <para>LAM calculates the expiration date based on the last
change, the password warning time (attribute "shadowWarning") and password change, the password warning time (attribute
the specified notification period.</para> "shadowWarning") and the specified notification period.</para>
<para>Examples:</para> <para>Examples:</para>
<para>Warning time = 14, notification period = 10: LAM will send out <para>Warning time = 14, notification period = 10: LAM will send
the email 24 days before the password expires</para> out the email 24 days before the password expires</para>
<para>Warning time = 14, notification period = 0: LAM will send out <para>Warning time = 14, notification period = 0: LAM will send
the email 14 days before the password expires</para> out the email 14 days before the password expires</para>
<screenshot> <screenshot>
<mediaobject> <mediaobject>
@ -2316,7 +2317,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -2370,21 +2372,21 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<para>Wildcards:</para> <para>Wildcards:</para>
<para>You can enter LDAP attributes as wildcards in the form <para>You can enter LDAP attributes as wildcards in the form
@@ATTRIBUTE_NAME@@. E.g. to add the user's common name use "@@cn@@". @@ATTRIBUTE_NAME@@. E.g. to add the user's common name use
For the common name it would be "@@cn@@".</para> "@@cn@@". For the common name it would be "@@cn@@".</para>
<para>There are also two special wildcards for the expiration date. <para>There are also two special wildcards for the expiration
@@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g. "31.12.2016". date. @@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g.
@@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g. "31.12.2016". @@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g.
"2016-12-31".</para> "2016-12-31".</para>
</section> </section>
<section> <section>
<title>Shadow: Delete or move expired accounts</title> <title>Shadow: Delete or move expired accounts</title>
<para>You can automatically delete or move expired accounts. The job <para>You can automatically delete or move expired accounts. The
checks Shadow account expiration dates (not password expiration job checks Shadow account expiration dates (not password
dates).</para> expiration dates).</para>
<screenshot> <screenshot>
<mediaobject> <mediaobject>
@ -2402,7 +2404,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -2436,11 +2439,11 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
password expires.</para> password expires.</para>
<para>You need to activate the Windows module for users to be able <para>You need to activate the Windows module for users to be able
to add this job. The job can be added multiple times (e.g. to send a to add this job. The job can be added multiple times (e.g. to send
second warning at a later time).</para> a second warning at a later time).</para>
<para>LAM calculates the expiration date based on the last password <para>LAM calculates the expiration date based on the last
change and the domain policy.</para> password change and the domain policy.</para>
<screenshot> <screenshot>
<mediaobject> <mediaobject>
@ -2458,7 +2461,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -2512,19 +2516,20 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<para>Wildcards:</para> <para>Wildcards:</para>
<para>You can enter LDAP attributes as wildcards in the form <para>You can enter LDAP attributes as wildcards in the form
@@ATTRIBUTE_NAME@@. E.g. to add the user's common name use "@@cn@@". @@ATTRIBUTE_NAME@@. E.g. to add the user's common name use
For the common name it would be "@@cn@@".</para> "@@cn@@". For the common name it would be "@@cn@@".</para>
<para>There are also two special wildcards for the expiration date. <para>There are also two special wildcards for the expiration
@@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g. "31.12.2016". date. @@EXPIRE_DATE_DDMMYYYY@@ will print the date as e.g.
@@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g. "31.12.2016". @@EXPIRE_DATE_YYYYMMDD@@ will print the date as e.g.
"2016-12-31".</para> "2016-12-31".</para>
</section> </section>
<section> <section>
<title>Windows: Delete or move expired accounts</title> <title>Windows: Delete or move expired accounts</title>
<para>You can automatically delete or move expired accounts.</para> <para>You can automatically delete or move expired
accounts.</para>
<screenshot> <screenshot>
<mediaobject> <mediaobject>
@ -2542,7 +2547,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -2572,7 +2578,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<section> <section>
<title>FreeRadius: Delete or move expired accounts</title> <title>FreeRadius: Delete or move expired accounts</title>
<para>You can automatically delete or move expired accounts.</para> <para>You can automatically delete or move expired
accounts.</para>
<screenshot> <screenshot>
<mediaobject> <mediaobject>
@ -2590,7 +2597,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -2620,8 +2628,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<section> <section>
<title>Qmail: Delete or move expired accounts</title> <title>Qmail: Delete or move expired accounts</title>
<para>You can automatically delete or move expired accounts. The job <para>You can automatically delete or move expired accounts. The
reads the qmail deletion date of user accounts.</para> job reads the qmail deletion date of user accounts.</para>
<screenshot> <screenshot>
<mediaobject> <mediaobject>
@ -2639,7 +2647,8 @@ mysql&gt; GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
<row> <row>
<entry><emphasis role="bold">Option</emphasis></entry> <entry><emphasis role="bold">Option</emphasis></entry>
<entry><emphasis role="bold">Description</emphasis></entry> <entry><emphasis
role="bold">Description</emphasis></entry>
</row> </row>
<row> <row>
@ -7351,6 +7360,20 @@ OK (10 msec)</programlisting>
cleartext answer to security question</para> cleartext answer to security question</para>
</listitem> </listitem>
<listitem>
<para><emphasis
role="bold">$INFO.389lockingStatusChange$:</emphasis> for 389ds
account locking, provides information if account was unlocked.
Possible values: unchanged, unlocked</para>
</listitem>
<listitem>
<para><emphasis
role="bold">$INFO.389deactivationStatusChange$:</emphasis> for 389ds
account locking, provides information if account was deactivated.
Possible values: unchanged, activated, deactivated</para>
</listitem>
<listitem> <listitem>
<para><emphasis role="bold">$NEW.&lt;attribute&gt;$:</emphasis> the <para><emphasis role="bold">$NEW.&lt;attribute&gt;$:</emphasis> the
value of a new attribute (e.g. $NEW.telephoneNumber$) for modified value of a new attribute (e.g. $NEW.telephoneNumber$) for modified