hmmm, its seems Simon has been working on a ldaputil tool similar to ldapuserdir https://gitea.psi.ch/ctrl_packages/gfa-ldaputils... does it make sense to have several general tools to query ldap?
hmmm, its seems Simon has been working on a ldaputil tool similar to ldapuserdir https://gitea.psi.ch/ctrl_packages/gfa-ldaputils... does it make sense to have several _general_ tools to query ldap?
viessm_h
requested review from caubet_m 2026-02-12 16:27:34 +01:00
If Simon has a newer tool that he has written, then we should look whether it has all the functionality we want. My ldapuserdir is quite old now, and the main class was written as a component of a gateway that steered the firewall setting of a gateway server (sigateway) based on the identity of the user logging in - so a user would get access only to the beamline machines he was entitled to... we used that to tunnel nomachine through it at that time... around 2013. The CLI I then just put on top for convenience and because we lacked such tools at that time
This old class uses an old python ldap library which still works, but it's not as nice to use as the newer one (ldap3). Did you already test Simon's new client @viessm_h?
If Simon has a newer tool that he has written, then we should look whether it has all the functionality we want. My ldapuserdir is quite old now, and the main class was written as a component of a gateway that steered the firewall setting of a gateway server (sigateway) based on the identity of the user logging in - so a user would get access only to the beamline machines he was entitled to... we used that to tunnel nomachine through it at that time... around 2013. The CLI I then just put on top for convenience and because we lacked such tools at that time
This old class uses an old python ldap library which still works, but it's not as nice to use as the newer one (ldap3). Did you already test Simon's new client @viessm_h?
Hmmm... Simon's tool is also already 5y old... don't know whether it covers all that ldapuserdir dies maybe should ask him next week. Whatever is easiest should be used. Both tools also allowed making changes to LDAP, but in today's AD this probably is anyhow no longer allowed for our identities.
Hmmm... Simon's tool is also already 5y old... don't know whether it covers all that ldapuserdir dies maybe should ask him next week. Whatever is easiest should be used. Both tools also allowed making changes to LDAP, but in today's AD this probably is anyhow no longer allowed for our identities.
You are not authorized to merge this pull request.
This pull request can be merged automatically.
This pull request is marked as a work in progress.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
hmmm, its seems Simon has been working on a ldaputil tool similar to ldapuserdir https://gitea.psi.ch/ctrl_packages/gfa-ldaputils... does it make sense to have several general tools to query ldap?
If Simon has a newer tool that he has written, then we should look whether it has all the functionality we want. My ldapuserdir is quite old now, and the main class was written as a component of a gateway that steered the firewall setting of a gateway server (sigateway) based on the identity of the user logging in - so a user would get access only to the beamline machines he was entitled to... we used that to tunnel nomachine through it at that time... around 2013. The CLI I then just put on top for convenience and because we lacked such tools at that time
This old class uses an old python ldap library which still works, but it's not as nice to use as the newer one (ldap3). Did you already test Simon's new client @viessm_h?
Hmmm... Simon's tool is also already 5y old... don't know whether it covers all that ldapuserdir dies maybe should ask him next week. Whatever is easiest should be used. Both tools also allowed making changes to LDAP, but in today's AD this probably is anyhow no longer allowed for our identities.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.