[OSGeo] #1668: Provide instructions to block LDAP users

OSGeo trac_osgeo at osgeo.org
Thu Jul 11 00:17:32 PDT 2024


#1668: Provide instructions to block LDAP users
---------------------------+--------------------
 Reporter:  strk           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  normal         |   Milestone:
Component:  SysAdmin/LDAP  |  Resolution:
 Keywords:                 |
---------------------------+--------------------
Changes (by strk):

 * component:  SysAdmin => SysAdmin/LDAP

Comment:

 For the record: dropping account is now supported by a script and is
 documented in https://wiki.osgeo.org/wiki/SAC:LDAP#Command_line_interface

 Only thing left is _BLOCKING_ an account. That is, keep the name "taken"
 while not allowing that user to authenticate. It may be as simple as
 setting an unguessable password, but I'm not expert. In unix systems you'd
 use an impossible password to lock (what passwd -l does)
-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1668#comment:3>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Sac mailing list