Implement user and person creation #37

New issue

Open

opened 2022-02-26 11:57:40 +01:00 by magicfelix · 9 comments

magicfelix commented

2022-02-26 11:57:40 +01:00

(Migrated from edugit.org)

edugit.org/AlekSIS/official/AlekSIS-App-LDAP/-@2a553a3174

Currently, ldap_create_user() just prepares some variables, but does not interact with the LDAP server.

In order to make this work, we also need a new structure and frontend to configure mappings.

How will this work?

The administrator visits the data mangement menu, and chooses "LDAP mappings"
The "LDAP mapping" page lists all kinds of models that have mappings configured
The adminsitrator can add a new set of mappings for a model class, e.g. for Person
- The administrator needs to configure the base DN for new objects
- The administrator needs to configure the objectClasses for new objects
Creating or editing a set of mappings leads to a page listing all mappings for this model
The mappings are based on the LDAP attributes, with each mapping having the following columns:
- ldap_attribute: The name of the LDAP attribute
- read_regex: A regular expression for reading the attribute. This should be, for example (?<first_name>.*) (?<last_name>.*) to dissect a cn
- write_template: A Django template fed with the model instance, generating the LDAP value

Caveats

A migration is needed to transfer the existing preferences into a mapping set for Person

https://edugit.org/AlekSIS/official/AlekSIS-App-LDAP/-/commit/2a553a317451baf748c4a60a6e117515d0e6f82c Currently, ldap_create_user() just prepares some variables, but does not interact with the LDAP server. In order to make this work, we also need a new structure and frontend to configure mappings. ## How will this work? * The administrator visits the data mangement menu, and chooses "LDAP mappings" * The "LDAP mapping" page lists all kinds of models that have mappings configured * The adminsitrator can add a new set of mappings for a model class, e.g. for `Person` * The administrator needs to configure the base DN for new objects * The administrator needs to configure the `objectClass`es for new objects * Creating or editing a set of mappings leads to a page listing all mappings for this model * The mappings are based on the LDAP attributes, with each mapping having the following columns: * `ldap_attribute`: The name of the LDAP attribute * `read_regex`: A regular expression for reading the attribute. This should be, for example `(?<first_name>.*) (?<last_name>.*)` to dissect a `cn` * `write_template`: A Django template fed with the model instance, generating the LDAP value ## Caveats * A migration is needed to transfer the existing preferences into a mapping set for `Person`

Rows
Columns