[ale] Low resource, easy to admin LDAP server

Jim Kinney jim.kinney at gmail.com
Fri Dec 23 08:21:12 EST 2016


Hah, hah. I don't think of hard drive space or package count any more. For
me, an application that pulls in 150 dependencies and requires 280 MB when
installed is nothing when it's on a system with 6 4TB drives in a RAID6.

As I use freeipa at work, it's pretty easy to setup and it includes
automatic replication. Since I don't have to do a zillion configuration
steps before it runs, that's "lightweight" for me.

Yeah. Freeipa is overkill for just storing names and phone numbers. A flat
file and a grep search is really light and fast enough up to many hundreds
of entries. Slap a tiny perl/python/ruby web front end on it and call it a
day.

On Dec 22, 2016 10:37 PM, "DJ-Pfulio" <DJPfulio at jdpfu.com> wrote:

> And FreeIPA meets those requirements?  Truly?
> $ sudo apt install freeipa-server
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
>
> The following additional packages will be installed:
>   389-ds-base 389-ds-base-libs ant ant-optional apache2 apache2-bin
>   apache2-data apache2-utils bind9 bind9-dyndb-ldap bind9utils certmonger
>   custodia dogtag-pki-server-theme fonts-font-awesome freeipa-admintools
>   freeipa-client freeipa-common freeipa-server-dns glassfish-activation
>   ieee-data junit krb5-admin-server krb5-config krb5-kdc krb5-kdc-ldap
>   krb5-pkinit krb5-user ldap-utils libantlr-java libapache-pom-java
>   libapache2-mod-auth-gssapi libapache2-mod-nss libapache2-mod-wsgi libapr1
>   libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap libargs4j-java
>   libatinject-jsr330-api-java libatk-wrapper-java libatk-wrapper-java-jni
>   libbasicobjects0 libbsh-java libc-ares2 libclassworlds-java
>   libcodemodel-java libcollection4 libcommons-cli-java
> libcommons-codec-java
>   libcommons-collections3-java libcommons-dbcp-java
> libcommons-httpclient-java
>   libcommons-io-java libcommons-lang-java libcommons-logging-java
>   libcommons-net2-java libcommons-parent-java libcommons-pool-java
>   libcurl3-nss libdbd-sqlite3-perl libdbi-perl libdhash1 libdom4j-java
>   libdoxia-core-java libdtd-parser-java libecj-java
> libexcalibur-logkit-java
>   libfastinfoset-java libgssrpc4 libguava-java libhsm-bin
> libhttpclient-java
>   libhttpcore-java libini-config5 libipa-hbac0 libirs141 libisorelax-java
>   libistack-commons-java libjackson-json-java libjackson2-annotations-java
>   libjackson2-core-java libjackson2-databind-java
> libjackson2-dataformat-smile
>   libjackson2-jaxrs-providers-java libjackson2-module-jaxb-
> annotations-java
>   libjavassist-java libjaxb-api-java libjaxb-java libjaxen-java
>   libjaxp1.3-java libjdom1-java libjettison-java libjing-java
>   libjoda-convert-java libjoda-time-java libjs-dojo-core libjs-dojo-dijit
>   libjs-dojo-dojox libjsch-java libjsoup-java libjsr305-java
>   libjsr311-api-java libjss-java libkadm5clnt-mit9 libkadm5srv-mit9
> libkdb5-8
>   libkrad0 libldap-java libldns1 liblog4j1.2-java
>   libmaven-file-management-java libmaven-shared-io-java libmaven2-core-java
>   libmozilla-ldap-perl libmsv-java libnetaddr-ip-perl libnss-sss libnss3-1d
>   libnss3-tools libnuxwdog-java libnuxwdog0 liboro-java libpam-pwquality
>   libpam-sss libpath-utils1 libperl4-corelibs-perl
> libplexus-ant-factory-java
>   libplexus-archiver-java libplexus-bsh-factory-java libplexus-cipher-java
>   libplexus-classworlds-java libplexus-container-default-java
>   libplexus-containers-java libplexus-interactivity-api-java
>   libplexus-interpolation-java libplexus-io-java
> libplexus-sec-dispatcher-java
>   libplexus-utils-java libref-array1 librelaxng-datatype-java
>   librelaxngcc-java libresteasy-java librngom-java
> libsasl2-modules-gssapi-mit
>   libsaxon-java libsaxonhe-java libscannotation-java libservlet2.5-java
>   libservlet3.0-java libslf4j-java libsocket-getaddrinfo-perl
> libsocket6-perl
>   libsofthsm2 libsss-idmap0 libsss-nss-idmap0 libsss-sudo libstax-ex-java
>   libstax-java libstreambuffer-java libsvrcore0 libtomcat7-java
>   libtomcat8-java libtomcatjss-java libtxw2-java libverto-libevent1
> libverto1
>   libwagon-java libwerken.xpath-java libxalan2-java libxbean-java
>   libxerces2-java libxml-commons-external-java
> libxml-commons-resolver1.1-java
>   libxmlrpc-core-c3 libxom-java libxpp2-java libxpp3-java libxsom-java
>   libyaml-snake-java memcached oddjob oddjob-mkhomedir opendnssec
>   opendnssec-common opendnssec-enforcer opendnssec-enforcer-sqlite3
>   opendnssec-signer pki-base pki-ca pki-kra pki-server pki-tools
> python-cffi
>   python-cffi-backend python-cryptography python-custodia python-dateutil
>   python-decorator python-dnspython python-enum34 python-gssapi python-idna
>   python-ipaclient python-ipaddress python-ipalib python-ipaserver
>   python-jwcrypto python-kdcproxy python-ldap python-libipa-hbac
>   python-libsss-nss-idmap python-memcache python-netaddr python-nss
> python-ply
>   python-pyasn1 python-pycparser python-qrcode python-selinux
>   python-setuptools python-sss python-systemd python-usb python-yubico
>   slapi-nis softhsm2 softhsm2-common sssd sssd-ad sssd-ad-common
> sssd-common
>   sssd-ipa sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy tomcat7-common
>   tomcat7-user velocity
> Suggested packages:
>   ant-doc ant-gcj default-jdk | java-compiler | java-sdk ant-optional-gcj
>   antlr javacc jython libbcel-java libbsf-java libcommons-net-java
>   libgnumail-java libjdepend-java libregexp-java apache2-doc
>   apache2-suexec-pristine | apache2-suexec-custom bind9-doc libpam-krb5
>   junit-doc openbsd-inetd | inet-superserver opensc
>   libatinject-jsr330-api-java-doc libclassworlds-java-doc
>   libcommons-collections3-java-doc libcommons-dbcp-java-doc
>   libgeronimo-jta-1.1-spec-java libcommons-httpclient-java-doc
>   libcommons-io-java-doc libcommons-lang-java-doc libavalon-framework-java
>   libcommons-logging-java-doc libcommons-net2-java-doc libclone-perl
>   libmldbm-perl libnet-daemon-perl libsql-statement-perl libdom4j-java-doc
>   libdtd-parser-java-doc ecj libecj-java-gcj krb5-doc
> libjackson-json-java-doc
>   libjackson2-annotations-java-doc libjackson2-core-java-doc
>   libjackson2-databind-java-doc libjackson2-dataformat-smile-doc
>   libjaxp1.3-java-gcj libjdom1-java-doc libjoda-convert-java-doc
>   libjoda-time-java-doc libjsoup-java-doc libjsr305-java-doc
>   liblog4j1.2-java-doc libmaven-file-management-java-doc
>   libmaven-shared-io-java-doc libplexus-cipher-java-doc
>   libplexus-classworlds-java-doc libplexus-container-default-java-doc
>   libplexus-interactivity-api-java-doc libplexus-interpolation-java-doc
>   libplexus-sec-dispatcher-java-doc libplexus-utils-java-doc
> libsaxon-java-doc
>   libstax-java-doc tomcat7 tomcat8 libwagon-java-doc libxalan2-java-doc
>   libxsltc-java groovy2 libequinox-osgi-java libosgi-compendium-java
>   libosgi-core-java libqdox-java libspring-beans-java
> libspring-context-java
>   libspring-core-java libspring-web-java libxerces2-java-doc
>   libxerces2-java-gcj libxml-commons-resolver1.1-java-doc libxom-java-doc
>   libcache-memcached-perl libmemcached libyaml-perl libterm-readkey-perl
>   opendnssec-doc python-dev python-cryptography-doc
>   python-cryptography-vectors python-enum34-doc python-ldap-doc ipython
>   python-netaddr-docs python-ply-doc doc-base python-setuptools-doc
> sssd-tools
>   libsasl2-modules-ldap tomcat7-docs tomcat7-admin tomcat7-examples
>   velocity-doc
> The following NEW packages will be installed:
>   389-ds-base 389-ds-base-libs ant ant-optional apache2 apache2-bin
>   apache2-data apache2-utils bind9 bind9-dyndb-ldap bind9utils certmonger
>   custodia dogtag-pki-server-theme fonts-font-awesome freeipa-admintools
>   freeipa-client freeipa-common freeipa-server freeipa-server-dns
>   glassfish-activation ieee-data junit krb5-admin-server krb5-config
> krb5-kdc
>   krb5-kdc-ldap krb5-pkinit krb5-user ldap-utils libantlr-java
>   libapache-pom-java libapache2-mod-auth-gssapi libapache2-mod-nss
>   libapache2-mod-wsgi libapr1 libaprutil1 libaprutil1-dbd-sqlite3
>   libaprutil1-ldap libargs4j-java libatinject-jsr330-api-java
>   libatk-wrapper-java libatk-wrapper-java-jni libbasicobjects0 libbsh-java
>   libc-ares2 libclassworlds-java libcodemodel-java libcollection4
>   libcommons-cli-java libcommons-codec-java libcommons-collections3-java
>   libcommons-dbcp-java libcommons-httpclient-java libcommons-io-java
>   libcommons-lang-java libcommons-logging-java libcommons-net2-java
>   libcommons-parent-java libcommons-pool-java libcurl3-nss
> libdbd-sqlite3-perl
>   libdbi-perl libdhash1 libdom4j-java libdoxia-core-java libdtd-parser-java
>   libecj-java libexcalibur-logkit-java libfastinfoset-java libgssrpc4
>   libguava-java libhsm-bin libhttpclient-java libhttpcore-java
> libini-config5
>   libipa-hbac0 libirs141 libisorelax-java libistack-commons-java
>   libjackson-json-java libjackson2-annotations-java libjackson2-core-java
>   libjackson2-databind-java libjackson2-dataformat-smile
>   libjackson2-jaxrs-providers-java libjackson2-module-jaxb-
> annotations-java
>   libjavassist-java libjaxb-api-java libjaxb-java libjaxen-java
>   libjaxp1.3-java libjdom1-java libjettison-java libjing-java
>   libjoda-convert-java libjoda-time-java libjs-dojo-core libjs-dojo-dijit
>   libjs-dojo-dojox libjsch-java libjsoup-java libjsr305-java
>   libjsr311-api-java libjss-java libkadm5clnt-mit9 libkadm5srv-mit9
> libkdb5-8
>   libkrad0 libldap-java libldns1 liblog4j1.2-java
>   libmaven-file-management-java libmaven-shared-io-java libmaven2-core-java
>   libmozilla-ldap-perl libmsv-java libnetaddr-ip-perl libnss-sss libnss3-1d
>   libnss3-tools libnuxwdog-java libnuxwdog0 liboro-java libpam-pwquality
>   libpam-sss libpath-utils1 libperl4-corelibs-perl
> libplexus-ant-factory-java
>   libplexus-archiver-java libplexus-bsh-factory-java libplexus-cipher-java
>   libplexus-classworlds-java libplexus-container-default-java
>   libplexus-containers-java libplexus-interactivity-api-java
>   libplexus-interpolation-java libplexus-io-java
> libplexus-sec-dispatcher-java
>   libplexus-utils-java libref-array1 librelaxng-datatype-java
>   librelaxngcc-java libresteasy-java librngom-java
> libsasl2-modules-gssapi-mit
>   libsaxon-java libsaxonhe-java libscannotation-java libservlet2.5-java
>   libservlet3.0-java libslf4j-java libsocket-getaddrinfo-perl
> libsocket6-perl
>   libsofthsm2 libsss-idmap0 libsss-nss-idmap0 libsss-sudo libstax-ex-java
>   libstax-java libstreambuffer-java libsvrcore0 libtomcat7-java
>   libtomcat8-java libtomcatjss-java libtxw2-java libverto-libevent1
> libverto1
>   libwagon-java libwerken.xpath-java libxalan2-java libxbean-java
>   libxerces2-java libxml-commons-external-java
> libxml-commons-resolver1.1-java
>   libxmlrpc-core-c3 libxom-java libxpp2-java libxpp3-java libxsom-java
>   libyaml-snake-java memcached oddjob oddjob-mkhomedir opendnssec
>   opendnssec-common opendnssec-enforcer opendnssec-enforcer-sqlite3
>   opendnssec-signer pki-base pki-ca pki-kra pki-server pki-tools
> python-cffi
>   python-cffi-backend python-cryptography python-custodia python-dateutil
>   python-decorator python-dnspython python-enum34 python-gssapi python-idna
>   python-ipaclient python-ipaddress python-ipalib python-ipaserver
>   python-jwcrypto python-kdcproxy python-ldap python-libipa-hbac
>   python-libsss-nss-idmap python-memcache python-netaddr python-nss
> python-ply
>   python-pyasn1 python-pycparser python-qrcode python-selinux
>   python-setuptools python-sss python-systemd python-usb python-yubico
>   slapi-nis softhsm2 softhsm2-common sssd sssd-ad sssd-ad-common
> sssd-common
>   sssd-ipa sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy tomcat7-common
>   tomcat7-user velocity
> 0 upgraded, 241 newly installed, 0 to remove and 13 not upgraded.
> Need to get 71.3 MB of archives.
> After this operation, 169 MB of additional disk space will be used.
> Do you want to continue? [Y/n] N
>
> NNNNNNNNNNNNNNNNNNNNNNN!!!!!!!!!!
>
>
> Light?  Nope.
>
>
>
>
> On 12/22/2016 10:10 PM, Jim Kinney wrote:
> > Hmm. You could do this in freeipa. It has a phone number field by
> > default. Plus a web gui that's easy. Create users but don't allow them
> > access to a machine.
> >
> > On Dec 22, 2016 7:17 PM, "Alex Carver" <agcarver+ale at acarver.net
> > <mailto:agcarver%2Bale at acarver.net>> wrote:
> >
> >     Need some recommendations for a very low resource LDAP server that is
> >     easy to configure/administer.
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20161223/954ff3f7/attachment.html>


More information about the Ale mailing list