apple
[PATCH] Name Service Switch (NSS) directory backend
@agx originally submitted this as ticket:271
- Cc: @agx
This implements a simple NSS based user and group lookup directory service (it basically uses what's returned by the python's pwd and grp modules).
You can set a prefix for groups and ranges for uids/gids to make sure system users/groups don't end up having calendars.
This directory service is not doing any authentication, simply use Kerberos.
twistedcaldav.directory.nss.NssDirectoryService has some documentation in the top of the file.
@agx originally submitted this as attachment:0001-add-name-service-switch-directory-backend.patch:ticket:271
- Attachment 0001-add-name-service-switch-directory-backend.patch (8.8 KB) added
@agx originally submitted this as attachment:0002-add-default-values-for-the-NSS-backend.patch:ticket:271
- Attachment 0002-add-default-values-for-the-NSS-backend.patch (1.0 KB) added
@wsanchez originally submitted this as comment:1:ticket:271
- Status changed from new to assigned
- Priority changed from 5: Not set to 2: Expected
- Milestone set to 2.0
Cool.
@agx originally submitted this as attachment:0003-add-guid.patch:ticket:271
- Attachment 0003-add-guid.patch (3.3 KB) added
add guid for easier identification of calendars on disk
@wsanchez originally submitted this as comment:2:ticket:271
- Milestone changed from CalendarServer-2.2 to CalendarServer-2.x
@wsanchez originally submitted this as comment:3:ticket:271
- Milestone changed from CalendarServer-2.x to CalendarServer-3.x
rahul@… originally submitted this as attachment:nssdirectory-2.4.patch:ticket:271
- Attachment nssdirectory-2.4.patch (11.5 KB) added
NSS Directory patch for calendarserver 2.4
rahul@… originally submitted this as comment:4:ticket:271
Hi, I've just uploaded a NSS directory service patch compatible with calendarservice 2.4. Changes from the previous version include:
- Changed the baseGUID for NSS Directory service as the previous value was not being accepted.
- Removed making prefix mandatory as guid collisions is now not posssible.
- The new directory service architecture in calendarserver now uses shortName for lookup. Therefore no user and group should have the same short name. Did not know how to enforce this.
- PAM authentication added
@wsanchez originally submitted this as comment:5:ticket:271
- Owner changed from @wsanchez to @m0rgen
- Radar deleted
- Status changed from assigned to new
@wsanchez originally submitted this as comment:6:ticket:271
- Milestone changed from CalendarServer-3.x to Later
@wsanchez originally submitted this as comment:11:ticket:271
- Component changed from Calendar Server to twext
- Milestone changed from Later to Sooner
Now that twext.who is landed, this is worth a revisit.