=== Burgundavia [n=corey@ubuntu/member/burgundavia]  has joined #ubuntu-directory
=== Burgundavia [n=corey@ubuntu/member/burgundavia]  has joined #ubuntu-directory
=== Burgundavia_ [n=corey@ubuntu/member/burgundavia]  has joined #ubuntu-directory
=== MagnusR [n=magru@c83-252-237-96.bredband.comhem.se]  has joined #ubuntu-directory
=== MagnusR [n=magru@c83-252-237-96.bredband.comhem.se]  has left #ubuntu-directory [] 
=== EtienneG [n=etienne@ubuntu/member/EtienneG]  has joined #ubuntu-directory
[03:35] <dendrobates> I am thinking of making changes to the slapd package.  Adding password policy support, and configuring the suffix and perhaps some other things at during package config.
[03:35] <dendrobates> Anyone have any ideas?
[03:48] <dendrobates> please, not everyone at once.
[03:49] <robertj> hrmm
[03:50] <robertj> dendrobates: you mean storing those values in debconf?
[03:51] <shawarma> dendrobates: We already do the suffix config stuff?
[03:52] <dendrobates> shawarma: for some reason I am only prompted for the manager password.  but I saw the suffix stuff in the template file.
[03:53] <shawarma> dendrobates: Probably a priority thing.
[03:53] <shawarma> dendrobates: debconf questions have different priorities. We only has questions of high or critical priority.
[03:53] <shawarma> dendrobates: Possibly the suffix questions have lower priority.
[03:54] <dendrobates> shawarma: I see, however that makes the created db need to be recreated in almost every case.
[03:54] <shawarma> dendrobates: Yup.
[03:55] <dendrobates> which makes asking the manager password useless, because it will get wiped out.
[03:55] <dendrobates> I thought
[03:56] <dendrobates> I thought I could use pam_ldap as an example, it does quite a bit more.
=== robertj is still in the ignore-openldap and wait for fds or samba to mature
[03:57] <robertj> (mode)
[03:57] <dendrobates> robertj: as an actual ldap admin, what would you like to see in a default setup? Are you currently using openldap?
[03:58] <robertj> dendrobates: I am currently not although I did run a directory with a few thousand objects until just this year
[03:58] <dendrobates> There have been some major improvements in openldap, that should not be overlooked.
[03:58] <robertj> I'd like to see a default setup that just-works with no-questions asked, and a GtkAssistant (destructive is OK) for more advanced use cases
[03:59] <dendrobates> and I don't completely trust redhat to do the right thing with fds.
[04:00] <dendrobates> I do agree that fds is more enterprise ready.
[04:00] <dendrobates> or at least sun one was.
[04:00] <robertj> dendrobates: for most users, I don't think they really care what their base is
[04:00] <robertj> they just want an ou=Users,dc=local and thats fine for them
[04:01] <dendrobates> robertj: if they don't care, do they even need ldap?
[04:01] <robertj> dendrobates: sure they do, they want to do roaming user profiles and all the other stuff they can do on MS Server 2003 with a gui
[04:01] <robertj> I see debconf kinda in the middle, and maybe not very useful
[04:02] <robertj> really advanced users will just bust out vim anyway
[04:02] <robertj> so that basically leaves debconf for preseeding and intermediate users
[04:02] <dendrobates> true, but I've seen even seasoned admins that seem to have a mind block when it comes to directory services.
[04:03] <robertj> dendrobates: I mean directory admins specifically
[04:03] <robertj> if they are web guys, and they need an ldap for their new web app to auth of off, then they probably want to install the package, install the addon, and have it just work
[04:03] <robertj> dc=local is just fine for those folks
[04:04] <dendrobates> I would like to see pam_ldap and nss_ldap be given a url/hostname, and autoconfigure themselves, prompting when necessary.
[04:05] <robertj> dendrobates: that would be nice, those are more useful because they are sensible to preseed
[04:05] <robertj> the actual slapd, don't see much benefit there
[04:06] <dendrobates> I will look into GtkAssistant.  I have never used it.  The real benefit I see with slapd would be configuring certain modules.
=== EtienneG [n=etienne@ubuntu/member/EtienneG]  has joined #ubuntu-directory
=== olem [n=olem@haven.senso-rezo.org]  has joined #ubuntu-directory
=== rowley [i=rowley@nat/redhat/x-f8a9838fe7ff0abd]  has joined #ubuntu-directory
=== Burgundavia [n=corey@ubuntu/member/burgundavia]  has joined #ubuntu-directory
=== ajmitch [n=ajmitch@ubuntu/member/ajmitch]  has joined #ubuntu-directory