LDAP - Revision history

K95ma: /* Querying LDAP */ fix command

2025-09-10T00:58:05Z

Querying LDAP: fix command

← Older revision		Revision as of 19:58, 9 September 2025
Line 280:		Line 280:
	Example:		Example:

	ldapsearch -x -h ldap1.csclub.uwaterloo.ca -b dc=csclub,dc=uwaterloo,dc=ca uid=ctdalek		ldapsearch -x -H ldap://ldap1.csclub.uwaterloo.ca -b dc=csclub,dc=uwaterloo,dc=ca uid=ctdalek

	The <tt>-x</tt> option causes <tt>ldapsearch</tt> to switch to simple authentication rather than trying to authenticate via SASL (which will fail if you do not have a Kerberos ticket).		The <tt>-x</tt> option causes <tt>ldapsearch</tt> to switch to simple authentication rather than trying to authenticate via SASL (which will fail if you do not have a Kerberos ticket).
Line 288:		Line 288:
	Example:		Example:

	ldapsearch -x -h uwldap.uwaterloo.ca -b dc=uwaterloo,dc=ca "cn=Prabhakar Ragde"		ldapsearch -x -H ldap://uwldap.uwaterloo.ca -b dc=uwaterloo,dc=ca "cn=Prabhakar Ragde"

	=== Replication ===		=== Replication ===

O32patel at 02:30, 20 January 2025

2025-01-20T02:30:04Z

← Older revision		Revision as of 21:30, 19 January 2025
Line 325:		Line 325:
	# Edit entries in LDAP (<code>ldapvi -Y GSSAPI</code>)		# Edit entries in LDAP (<code>ldapvi -Y GSSAPI</code>)
	#* Find and replace the user's old username with the new one (<code>%s/$OLD/$NEW/g</code>)		#* Find and replace the user's old username with the new one (<code>%s/$OLD/$NEW/g</code>)
	# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)		# Change the user's Kerberos principal (on auth1 using <code>kadmin</code>, <code>renprinc $OLD $NEW</code>)
	# Move the user's home directory (on phosphoric-acid, <code>mv /users/$OLD /users/$NEW</code>)		# Move the user's home directory (on phosphoric-acid, <code>mv /users/$OLD /users/$NEW</code>)
	# Modify the user's ~/.forward file if their old username is in it.		# Modify the user's ~/.forward file if their old username is in it.

Merenber: /* Changing a user's username */

2025-01-17T01:36:01Z

Changing a user's username

← Older revision		Revision as of 20:36, 16 January 2025
Line 326:		Line 326:
	#* Find and replace the user's old username with the new one (<code>%s/$OLD/$NEW/g</code>)		#* Find and replace the user's old username with the new one (<code>%s/$OLD/$NEW/g</code>)
	# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)		# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)
	# Move the user's home directory (on ~~aspartame~~, <code>mv /users/$OLD /users/$NEW</code>)		# Move the user's home directory (on phosphoric-acid, <code>mv /users/$OLD /users/$NEW</code>)
			# Modify the user's ~/.forward file if their old username is in it.
	# Change the user's csc-general (and csc-industry, if subscribed) email address for <code>$OLD@csclub.uwaterloo.ca</code> to <code>$NEW@csclub.uwaterloo.ca</code>		# Change the user's csc-general (and csc-industry, if subscribed) email address for <code>$OLD@csclub.uwaterloo.ca</code> to <code>$NEW@csclub.uwaterloo.ca</code>
	#* https://mailman.csclub.uwaterloo.ca/admin/csc-general		#* https://mailman.csclub.uwaterloo.ca/admin/csc-general

S23adhik at 07:45, 18 December 2024

2024-12-18T07:45:04Z

← Older revision		Revision as of 02:45, 18 December 2024
Line 271:		Line 271:
	<pre># ldapadd -cxWD cn=root,dc=wics,dc=uwaterloo,dc=ca -f local-groups.ldif</pre>		<pre># ldapadd -cxWD cn=root,dc=wics,dc=uwaterloo,dc=ca -f local-groups.ldif</pre>
	The local groups are special because they usually are present on all systems, but we want to be able to add users to them at the LDAP level. For instance, the audio group controls access to sound equipment, and the adm group controls log read access.</li>		The local groups are special because they usually are present on all systems, but we want to be able to add users to them at the LDAP level. For instance, the audio group controls access to sound equipment, and the adm group controls log read access.</li>
	<li><p>That's all the entries we have to add manually! Now we can use software for the rest. See [[weo\|<code>~~weo~~</code>]] for more details.</p></li></ul>		<li><p>That's all the entries we have to add manually! Now we can use software for the rest. See [[weo\|<code>ceo</code>]] for more details.</p></li></ul>

Y2497li: /* Modifying LDAP entry */ fix title level

2020-01-15T23:54:31Z

Modifying LDAP entry: fix title level

← Older revision		Revision as of 18:54, 15 January 2020
Line 303:		Line 303:


	== Modifying LDAP entry ==		=== Modifying LDAP entry ===

	Editing entries can be easily done with <code>ldapvi</code>. First search for the entry using <code>ldapsearch</code> like above, and change <code>ldapsearch -x</code> to <code>ldapvi -Y GSSAPI</code> to make your edits.		Editing entries can be easily done with <code>ldapvi</code>. First search for the entry using <code>ldapsearch</code> like above, and change <code>ldapsearch -x</code> to <code>ldapvi -Y GSSAPI</code> to make your edits.
Line 317:		Line 317:
	EDITOR=vi ldapvi ******		EDITOR=vi ldapvi ******

	=== Changing a user's username ===		==== Changing a user's username ====

	Only a member of the Systems Committee can change a user's username. '''At all times, a user's username must match the user's username in WatIAM.'''		Only a member of the Systems Committee can change a user's username. '''At all times, a user's username must match the user's username in WatIAM.'''

Y2497li: /* Changing a user's username */ addes general instructions on editing an entry, and EDITOR error message

2020-01-15T23:52:17Z

Changing a user's username: addes general instructions on editing an entry, and EDITOR error message

← Older revision		Revision as of 18:52, 15 January 2020
Line 303:		Line 303:


	== ~~Changing~~ a ~~user's username~~ ==		== Modifying LDAP entry ==

			Editing entries can be easily done with <code>ldapvi</code>. First search for the entry using <code>ldapsearch</code> like above, and change <code>ldapsearch -x</code> to <code>ldapvi -Y GSSAPI</code> to make your edits.

			Note that if your <tt>EDITOR</tt> enviroment is set to something not avaliable it will give out errors like

			error (misc.c line 180): No such file or directory
			editor died
			error (ldapvi.c line 83): No such file or directory

			This can be fixed by something like

			EDITOR=vi ldapvi ******

			=== Changing a user's username ===

	Only a member of the Systems Committee can change a user's username. '''At all times, a user's username must match the user's username in WatIAM.'''		Only a member of the Systems Committee can change a user's username. '''At all times, a user's username must match the user's username in WatIAM.'''

Ztseguin at 22:49, 4 September 2019

2019-09-04T22:49:39Z

← Older revision		Revision as of 17:49, 4 September 2019
Line 310:		Line 310:

	# Edit entries in LDAP (<code>ldapvi -Y GSSAPI</code>)		# Edit entries in LDAP (<code>ldapvi -Y GSSAPI</code>)
	#* Find and replace the user's old username with the new one		#* Find and replace the user's old username with the new one (<code>%s/$OLD/$NEW/g</code>)
	# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)		# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)
	# Move the user's home directory (on aspartame, <code>mv /users/$OLD /users/$NEW</code>)		# Move the user's home directory (on aspartame, <code>mv /users/$OLD /users/$NEW</code>)

Ztseguin: /* Changing a user's username */

2019-09-04T22:40:52Z

Changing a user's username

← Older revision		Revision as of 17:40, 4 September 2019
Line 313:		Line 313:
	# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)		# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)
	# Move the user's home directory (on aspartame, <code>mv /users/$OLD /users/$NEW</code>)		# Move the user's home directory (on aspartame, <code>mv /users/$OLD /users/$NEW</code>)
	# Change the user's csc-general (and csc-industry, if subscribed) email address for $OLD@csclub.uwaterloo.ca to $NEW@csclub.uwaterloo.ca		# Change the user's csc-general (and csc-industry, if subscribed) email address for <code>$OLD@csclub.uwaterloo.ca</code> to <code>$NEW@csclub.uwaterloo.ca</code>
	#* https://mailman.csclub.uwaterloo.ca/admin/csc-general		#* https://mailman.csclub.uwaterloo.ca/admin/csc-general
	# If the user has vhosts on caffeine, update them to point to their new username		# If the user has vhosts on caffeine, update them to point to their new username

Ztseguin: /* Changing a user's username */

2019-09-04T22:40:30Z

Changing a user's username

← Older revision		Revision as of 17:40, 4 September 2019
Line 312:		Line 312:
	#* Find and replace the user's old username with the new one		#* Find and replace the user's old username with the new one
	# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)		# Change the user's Kerberos principal (on auth1, <code>renprinc $OLD $NEW</code>)
	# Move the user's home directory (on aspartame)		# Move the user's home directory (on aspartame, <code>mv /users/$OLD /users/$NEW</code>)
	# Change the user's csc-general (and csc-industry, if subscribed) email address for $OLD@csclub.uwaterloo.ca to $NEW@csclub.uwaterloo.ca		# Change the user's csc-general (and csc-industry, if subscribed) email address for $OLD@csclub.uwaterloo.ca to $NEW@csclub.uwaterloo.ca
	#* https://mailman.csclub.uwaterloo.ca/admin/csc-general		#* https://mailman.csclub.uwaterloo.ca/admin/csc-general

Ztseguin at 22:39, 4 September 2019

2019-09-04T22:39:21Z

← Older revision		Revision as of 17:39, 4 September 2019
Line 306:		Line 306:

	Only a member of the Systems Committee can change a user's username. '''At all times, a user's username must match the user's username in WatIAM.'''		Only a member of the Systems Committee can change a user's username. '''At all times, a user's username must match the user's username in WatIAM.'''

			All changes to an account MUST be done in person so that identity can be confirmed. If a member cannot attend in person, then an alternate method of identity verification may be chosen by the Systems Administrator.

	# Edit entries in LDAP (<code>ldapvi -Y GSSAPI</code>)		# Edit entries in LDAP (<code>ldapvi -Y GSSAPI</code>)