Monday, November 21, 2011

So long without blogging !!

It has been a while since my last post. After it I got very busy because I was changing jobs and had to travel just after I started the new job, but then I totally forgot :P. Today I thought I should change that and just go ahead and post.

So to do a quick resume, as I was saying, nine months ago I got a new job, working in a completely different area (but not totally unrelated) of what I have always worked before. For the past 10 years I had worked in software development and on the last years on IT Consultancy with some big enterprises products. Now I have gone to work with a CDN company that offers delivery services for static content, delivery of live and on demand streaming and a lot of security services within their CDN. Actually it's pretty cool, and it's not as demanding as my previous job which means more spare time to work on Mageia Linux and other stuff.

I also started to contribute more and more with Mageia Linux (and sadly less with Mandriva, but I suppose that's the natural course of things after all that happened with them last year, and the new direction that they're taking). Leaving aside the packages I maintain, I'm in the mentoring program, mentoring four (and soon five) packagers from the blogdrake spanish community. They have a huge 3rd-party repository for Mandriva and Mageia, but many of their packages don't exist in Mageia and it would be better if they were. So, we have been working with them in fixing their packages to get them to the point of being of enough quality to be imported into our official Mageia repositories. So far we have fixed and imported around 20 of them and we still continue working on others. The list of packages that still need to be reviewed and imported is pretty big and can be found here (the list is not always up-to-date and could be organized better but it's a start) if someone else wants to help us in getting them available for all the Mageia community :D

Well, that's all for now, I will try to start posting more frequently about what I'm working on as I did before on planet mdv, there's some stuff I have been working on lately and deserve a post :)

Friday, February 25, 2011

Dokuwiki LDAP authentication against 389 Directory Server (before Fedora Directory Server)

EDIT (25/02/2011): The group filter string was wrong, I didn't noticed before as I didn't had the need to use the groups feature until today. If you want to be able to access the admin options of dokuwiki you will need to create an admin group on 389 DS, add the users you need to it and update the group filter to the one of this guide.

In my company we are changing our LDAP server, we're going away from Sun Directory Server because since Oracle acquired Sun Microsystems, beginning with Oracle Sun Directory Server 7, it isn't a free (as in beer) product anymore (what a surprise uh ??). So we did some research and chose 389 Directory Server as it's replacement. The main reason behind this decision was that both servers have a very similar architecture and design because both have the same ancestor on Netscape Directory Sever, which made migration easier and learning curve lower. One of the websites we needed to migrate to the new server is a Dokuwiki installation. In general, LDAP configuration for any product is straight-forward, but depending on the LDAP server you are using probably you will need to do some quirks to the configuration to get it working, mainly on user and group filters.
Put this on your local.php configuration file and edit the $conf['auth']['ldap']['server'] variable pointing to your LDAP server, and $conf['auth']['ldap']['usertree'] and $conf['auth']['ldap']['grouptree'] with your user DN and group DN. Leave the rest as is:
$conf['useacl'] = 1;
$conf['openregister']= 0;
$conf['authtype'] = 'ldap';

$conf['auth']['ldap']['server'] = 'ldap://';
$conf['auth']['ldap']['usertree'] = 'ou=People, dc=ldapserver, dc=com';
$conf['auth']['ldap']['grouptree'] = 'ou=Groups, dc=ldapserver, dc=com';
$conf['auth']['ldap']['userfilter'] = '(&(uid=%{user})(objectClass=inetOrgPerson))';
$conf['auth']['ldap']['groupfilter'] = '(&(uniquemember=%{dn}))';

# This is optional but may be required for your server:
$conf['auth']['ldap']['version'] = 3;
That's all you need to do for basic non-SSL communication (which I haven't worked on yet), although dokuwiki's LDAP backend documentation explains which parameters you need to configure for that. One important thing to have in mind, according to the documentation, user creation isn't supported with the LDAP backend, so you will have to create your wiki users with other means, which you probably already do if your centralizing your authentication with an LDAP server.
Powered by Blogilo

Saturday, January 15, 2011

KDE 4.5.5 available for Mandriva 2010.1 and 2010.2 !!

mikala has done again KDE 4.5.5 backport packages for Mandriva 2010.[1,2]. These packages also include kdepim 4.4.9 and other goodies. Please read his blog for the installation instructions as they are very detailed so it doesn't make much sence to copy/paste them here.

Thanks again for the backport :)