[CalendarServer-dev] [PATCH] Name Service Switch (NSS) based directory service

Wilfredo Sánchez Vega wsanchez at wsanchez.net
Tue May 6 16:42:05 PDT 2008


   Coolness.

	-wsv


On Apr 27, 2008, at 2:21 AM, Guido Günther wrote:

> Hi,
> I finally got bored of synchronizing accounts.xml with the other user
> and group databases, so I stitched together a simple NSS based user  
> and
> group lookup directory service that simply uses the users and groups
> known to the system.
>
> You can set a prefix for groups and ranges for uids/gids to make sure
> system/admin users/groups don't end up having calendars. There's no
> location and resource handling yet although we could handle this too,
> but a proper LDAP interface might be more appropriate in that case.
>
> This directory service is not doing any authentication since everybody
> is doing Kerboeros anyways nowadays, so have fun! Pam would be  
> possible
> to stich in too - but you'll have to hack up python-pam a bit which
> isn't worth it - so better get your KDC now!
>
> This was tested on Linux but should work on any unix based system. I'd
> be happy to adjust for other OSes if there are problems. The first  
> patch
> adds the directory service itself while the second adds the defaults  
> to
> twistedcaldav.config. Use:
> 	twistedcaldav.directory.nss.NssDirectoryService
> as DirectoryService and have a look at twistedcaldav.directory.nss for
> the available options. The patche are at Ticket #271 in trac:
> http://trac.macosforge.org/projects/calendarserver/ticket/271
> Cheers,
> -- Guido
> _______________________________________________
> calendarserver-dev mailing list
> calendarserver-dev at lists.macosforge.org
> http://lists.macosforge.org/mailman/listinfo/calendarserver-dev



More information about the calendarserver-dev mailing list