|
|
Metadirectory Technical Status Meeting
https://fsuid.fsu.edu/admin
3/1/2005
- Project
Status
- Another replication problem cropped up that
caused us to remove and re-add all R/W replicants (udbprod, sprded01,
sprded02 & radius1). Also
upgraded eDir S/W to 8.7.3.4.
Have opened incident with Novell regarding core dumps.
- Modified CHS script to use better formatted
“fsuEdu” parts of names.
- Added new eDir attributes as needed by various
projects (see http://fsuid.fsu.edu/admin/project-history/02-25-2005.1.html
for details). Need to change the
FSUID public and helpdesk search to use the new “fsuEdu” parts of names,
including “fsuEduNickName”.
- Met with UCS TEC staff (http://tecs.fsu.edu/) and discussed
starting a project to help manage their Win AD Domain Controller and
classroom logins via FSUIDs.
- Held the second “Bb as Portal” meeting; showed
off some encouraging progress towards moving the FSUID pages natively
into Blackboard and a plan for migrating Secure Login web applications
under Blackboard.
- Met with User Services Windows System group to
discuss how to structure the OUs and account management. Considering running Perl scripts
directly on a DC, which will allow us to use CPAN’s Win32::Exchange and
other neato Windows Perl modules for management of Windows attributes
that aren’t easy to get to via LDAP.
- Will demo and discuss further management of
BlueSocket devices with FSUIDs.
- Action
Items
- Set up public search on “directory.fsu.edu”
using filtered active students/employees. Have decided not to use eDir “filtered R/W replication”.
- Set up “account disable-izer” script to clean
up Windows AD accounts on a per-domain basis (former students, employees,
etc.).
- Set up an “account disable-izer” script for
former employees (compare daily PeopleSoft HR extracts).
- Work with UCS TEC and User Services Windows
System Group to set up automation of account management within their
respective AD domains.
- Get LDAP authentication working under AIX 5.2
(either natively using secldapclntd or using open source packages) – Sean
Patronis has this as an action item now.
- Continuing to provide CARS user functions in
FSUID –Waiting on a “CARS API” via
an SSH tunnel and Oracle PL/SQL calls for CARS account management.
- [Group – longer term] Continue
working SSN à FSUSN replacement discussions with campus. Pushing in IS out to customers to
start using FSUSN which is now populated in USER_ACCOUNT. Secure
Login beginning to use FSUSN in place of SSN. FSUID now offers FSUCard/FSUSN as a possible authentication
method.
|