[Date Prev][Date Next] [Chronological] [Thread] [Top]

Cool Web / Shell Interfaces?



On Fri, Mar 16, 2001 at 04:22:55PM -0800, dannyman wrote:
> So, I'm laying out my schema, and it leads me to wonder, can I define an ACL
> that permits someone with a given relationship to an object permission to
> modify particular attributes of that object?
> 
> For example, if someone binds with the DN that corresponds to the DN listed
> for my manager attribute, they ought to be able to set, say, my title.

RTFM ...

Looks like this would be expressed something like:

access to attr=title
by dnattr=manager write

Anyone has opinions on what is the best we 2 ldap gateway?  web2ldap is this
wonky hard-to-compile python thing.  It's ugly, and I hate Python.  I know,
that's my problem.  web500gw seems a little more promising, but is quite an
experience to try and configure.  I also have no idea if it is under active
development or if its security is very trusted, and a few features seem
unimplemented.  I am tempted to hack something together, but prefer to not
re-invent the wheel if I can avoid it.

As an alternative, is there perhaps a useful LDAP shell client ... something
that you could interactively bind, run queries on, and edit attributes in in a
reasonably user-friendly manner?

Thanks,
-danny

-- 
http://dannyman.toldme.com/