[opensuse-buildservice] How to set up LDAP authentication for OBS?
Hi, Anybody ever set up LDAP authentication for OBS? How to set up it? I can't find any guide about this, it will be better if anyone can document it in OBS wiki page.
On Tuesday 13 July 2010 07:56:32 Yang, Yi Y wrote:
Hi,
Anybody ever set up LDAP authentication for OBS? How to set up it? I can't find any guide about this, it will be better if anyone can document it in OBS wiki page.
There are comments and variables in /srv/www/obs/api/config/environments/production.rb are they not sufficient ? bye adrian -- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
Thanks, there are many info in it, but it isn't easy to follow it and set up LDAP authentication for OBS successfully, it is better if there is a document :-) Can we use mixed authentication ways in OBS? For example, for internal users, we can use LDAP, but for external users, we still use the old way, user name plus password. How to change user's password is an issue, I didn't find an interface for this in OBS web UI, currently do we have a way to change password of a user?
-----Original Message----- From: Adrian Schröter [mailto:adrian@suse.de] Sent: Tuesday, July 13, 2010 4:57 PM To: opensuse-buildservice@opensuse.org Cc: Yang, Yi Y; iarnell@gmail.com; david@dgreaves.com Subject: Re: [opensuse-buildservice] How to set up LDAP authentication for OBS?
Hi,
Anybody ever set up LDAP authentication for OBS? How to set up it? I can't find any guide about this, it will be better if anyone can document it in OBS wiki
On Tuesday 13 July 2010 07:56:32 Yang, Yi Y wrote: page.
There are comments and variables in
/srv/www/obs/api/config/environments/production.rb
are they not sufficient ?
bye adrian
--
Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
To change the password, just open your OBS API web page with your configured API address(checking "/etc/lighttpd/vhosts.d/obs.conf") -----Original Message----- From: ext Yang, Yi Y [mailto:yi.y.yang@intel.com] Sent: Wednesday, July 14, 2010 9:22 AM To: Adrian Schröter; opensuse-buildservice@opensuse.org Cc: iarnell@gmail.com; david@dgreaves.com Subject: RE: [opensuse-buildservice] How to set up LDAP authentication for OBS? Thanks, there are many info in it, but it isn't easy to follow it and set up LDAP authentication for OBS successfully, it is better if there is a document :-) Can we use mixed authentication ways in OBS? For example, for internal users, we can use LDAP, but for external users, we still use the old way, user name plus password. How to change user's password is an issue, I didn't find an interface for this in OBS web UI, currently do we have a way to change password of a user?
-----Original Message----- From: Adrian Schröter [mailto:adrian@suse.de] Sent: Tuesday, July 13, 2010 4:57 PM To: opensuse-buildservice@opensuse.org Cc: Yang, Yi Y; iarnell@gmail.com; david@dgreaves.com Subject: Re: [opensuse-buildservice] How to set up LDAP authentication for OBS?
On Tuesday 13 July 2010 07:56:32 Yang, Yi Y wrote:
Hi,
Anybody ever set up LDAP authentication for OBS? How to set up it? I can't find any guide about this, it will be better if anyone can document it in OBS wiki page.
There are comments and variables in
/srv/www/obs/api/config/environments/production.rb
are they not sufficient ?
bye adrian
--
Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On Jul 13, 2010, at 22:40, "victor.liu@nokia.com"
To change the password, just open your OBS API web page with your configured API address(checking "/etc/lighttpd/vhosts.d/obs.conf")
That doesn't work for users not in the Admin role.
-----Original Message----- From: ext Yang, Yi Y [mailto:yi.y.yang@intel.com] Sent: Wednesday, July 14, 2010 9:22 AM To: Adrian Schröter; opensuse-buildservice@opensuse.org Cc: iarnell@gmail.com; david@dgreaves.com Subject: RE: [opensuse-buildservice] How to set up LDAP authentication for OBS?
Thanks, there are many info in it, but it isn't easy to follow it and set up LDAP authentication for OBS successfully, it is better if there is a document :-)
Can we use mixed authentication ways in OBS? For example, for internal users, we can use LDAP, but for external users, we still use the old way, user name plus password.
How to change user's password is an issue, I didn't find an interface for this in OBS web UI, currently do we have a way to change password of a user?
-----Original Message----- From: Adrian Schröter [mailto:adrian@suse.de] Sent: Tuesday, July 13, 2010 4:57 PM To: opensuse-buildservice@opensuse.org Cc: Yang, Yi Y; iarnell@gmail.com; david@dgreaves.com Subject: Re: [opensuse-buildservice] How to set up LDAP authentication for OBS?
On Tuesday 13 July 2010 07:56:32 Yang, Yi Y wrote:
Hi,
Anybody ever set up LDAP authentication for OBS? How to set up it? I can't find any guide about this, it will be better if anyone can document it in OBS wiki page.
There are comments and variables in
/srv/www/obs/api/config/environments/production.rb
are they not sufficient ?
bye adrian
--
Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de
-- To unsubscribe, e-mail: opensuse-buildservice +unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On 14/07/10 02:22, Yang, Yi Y wrote:
Thanks, there are many info in it, but it isn't easy to follow it and set up LDAP authentication for OBS successfully, it is better if there is a document :-)
Can I suggest you start a document on the opensuse wiki describing how you have setup LDAP authentication so far and then raise specific problems that you encounter.
Can we use mixed authentication ways in OBS? For example, for internal users, we can use LDAP, but for external users, we still use the old way, user name plus password. Yes, that should work fine.
As far as I recall the OBS looks for a username in LDAP and if it doesn't find it then it looks in the simple user db. OBS doesn't cross-check the databases. This means that if a username exists in ldap, the ldap credentials will be used. If LDAP is not available then the system will 'fall back' to the simple user DB. This has implications if LDAP goes down and you let users register arbitrary usernames without checking.
How to change user's password is an issue, I didn't find an interface for this in OBS web UI, currently do we have a way to change password of a user? AFAIK there isn't one.
I am sure patches would be gratefully received :) David -- "Don't worry, you'll be fine; I saw it work in a cartoon once..." -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
-----Original Message----- From: David Greaves [mailto:david@dgreaves.com] Sent: Thursday, July 15, 2010 4:53 AM To: Yang, Yi Y Cc: Adrian Schröter; opensuse-buildservice@opensuse.org; iarnell@gmail.com Subject: Re: [opensuse-buildservice] How to set up LDAP authentication for OBS?
On 14/07/10 02:22, Yang, Yi Y wrote:
Thanks, there are many info in it, but it isn't easy to follow it and set up LDAP authentication for OBS successfully, it is better if there is a document :-)
Can I suggest you start a document on the opensuse wiki describing how you have setup LDAP authentication so far and then raise specific problems that you encounter.
Ok. We will write up a document once we set it up successfully. -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
participants (5)
-
Adrian Schröter -
David Greaves -
Robert Xu -
victor.liu＠nokia.com -
Yang, Yi Y