Chapter 3. Managing entries in your LDAP directory

Table of Contents

Users
Personal
Unix
Samba 3
Kolab
Asterisk
EDU person
Password policy (LAM Pro)
Groups
Unix
Unix groups with rfc2307bis schema (LAM Pro)
Samba 3
Hosts
Samba 3
IP addresses (LAM Pro)
Group of (unique) names (LAM Pro)
Aliases (LAM Pro)
NIS objects (LAM Pro)
Password policies (LAM Pro)
Custom scripts (LAM Pro)
Tree view (LDAP browser)
Typical usage scenarios

This chapter will give you instructions how to manage the different LDAP entries in your directory.

Please note that not all account types are manageable with the free LAM release. LAM Pro provides some more account types and modules to support additional LDAP object classes.

Additional types:

Additional modules:

Basic page layout:

After the login LAM will present you its main page. It consists of a header part which is equal for all pages and the content area which covers most the of the page.

The header part includes the links to manage all account types (e.g. users and groups) and open the tree view (LDAP browser). There is also the logout link and a tools entry.

When you login the you will see an account listing in the content area.

Here you can create, delete and modify accounts. Use the action buttons at the left or double click on an entry to edit it.

The suffix selection box allows you to list only the accounts which are located in a subtree of your LDAP directory.

You can change the number of shown entries per page with "Change settings". Depending on the account type there may be additional settings. E.g. the user list can convert group numbers to group names.

When you select to edit an entry then LAM will show all its data on a tabbed view. There is one tab for each functional part of the account. You can set default values by loading an account profile.

Users

Personal

This module is the most common basis for user accounts in LAM. You can use it stand-alone to manage address book entries or in combination with Unix, Samba or other modules.

The Personal module provides support for managing various personal data of your users including mail addresses and telephone numbers. You can also add photos of your users. If you do not need to manage all attributes then you can deactivate them in your server profile.

Unix

The Unix module manages Unix user accounts including group memberships.

Samba 3

LAM supports full Samba 3 user management including logon hours and terminal server options.

Kolab

This module supports to manage Kolab accounts with LAM. E.g. you can set the user's mail quota and define invitation policies.

Please enter an email address at the Personal page and set a Unix password first. Both are required that Kolab accepts the accounts.

Kolab users should not be directly deleted with LAM. You can mark an account for deletion which then is done by the Kolab server itself. This makes sure that the mailbox etc. is also deleted.

Asterisk

LAM supports Asterisk accounts, too. You can set the called ID, host and account context for your users.

EDU person

EDU person accounts are mainly used in university networks. You can specify the principal name, nick names and much more.

Password policy (LAM Pro)

OpenLDAP supports the ppolicy overlay to manage password policies for LDAP entries. LAM Pro supports managing the policies and assigning them to user accounts.

Please add the account type "Password policies" to your LAM server profile and activate the "Password policy" module for the user type.

You can assign any password policy which is found in the LDAP suffix of the "Password policies" type. When you set the policy to "default" then OpenLDAP will use the default policy as defined in your slapd.conf file.