projects
/
mirror
/
userdir-ldap-cgi.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
html/forward.wml: stop referring to features as new
[mirror/userdir-ldap-cgi.git]
/
html
/
doc-direct.wml
diff --git
a/html/doc-direct.wml
b/html/doc-direct.wml
index
8bce252
..
2a08180
100644
(file)
--- a/
html/doc-direct.wml
+++ b/
html/doc-direct.wml
@@
-4,25
+4,25
@@
<dsatoc/>
<p>Since the
<dsatoc/>
<p>Since the
-<a href="http://lists.debian.org/debian-announce/debian-announce-2003/msg00001.html">compromise</a>,
+<a href="http
s
://lists.debian.org/debian-announce/debian-announce-2003/msg00001.html">compromise</a>,
the information available to non-developers via the LDAP interface has been
limited a great deal. However, as always, the full database is accessible from
any .debian.org machine. If you wish relatively unfettered access to the LDAP
the information available to non-developers via the LDAP interface has been
limited a great deal. However, as always, the full database is accessible from
any .debian.org machine. If you wish relatively unfettered access to the LDAP
-database, connect to it from a .debian.org machine, such as
ravel
.debian.org
+database, connect to it from a .debian.org machine, such as
people
.debian.org
(which is recommended for general shell usage anyhow).
</p>
<p>
(which is recommended for general shell usage anyhow).
</p>
<p>
-The LDAP utilities package (<a href="http://packages.debian.org/ldap-utils">\
+The LDAP utilities package (<a href="http
s
://packages.debian.org/ldap-utils">\
ldap-utils</a>) provides an utility called ldapsearch that can be used
to execute direct queries to the database. This is done by supplying
the following arguments to ldapsearch: <strong>-x -H
ldap-utils</a>) provides an utility called ldapsearch that can be used
to execute direct queries to the database. This is done by supplying
the following arguments to ldapsearch: <strong>-x -H
-ldap://db.debian.org -b dc=debian,dc=org</strong>. Alternatively, the
+ldap
s
://db.debian.org -b dc=debian,dc=org</strong>. Alternatively, the
<strong>-H</strong> and <strong>-b</strong> options can be put in
one's ~/.ldaprc, in the following form:
</p><pre>
<strong>-H</strong> and <strong>-b</strong> options can be put in
one's ~/.ldaprc, in the following form:
</p><pre>
-[ dbharris@
ravel
: ~/ ]$ cat ~/.ldaprc
-
HOST
db.debian.org
+[ dbharris@
people
: ~/ ]$ cat ~/.ldaprc
+
URI ldaps://
db.debian.org
BASE dc=debian,dc=org
</pre>
BASE dc=debian,dc=org
</pre>
@@
-32,7
+32,7
@@
authentication. There appears to be no ~/.ldaprc option which does the same as
<strong>-x</strong>. With these parameters specified, we're ready to begin
searching. Here's an example:
</p><pre>
<strong>-x</strong>. With these parameters specified, we're ready to begin
searching. Here's an example:
</p><pre>
-[ dbharris@
ravel
: ~/ ]$ ldapsearch -x uid=dbharris keyfingerprint
+[ dbharris@
people
: ~/ ]$ ldapsearch -x uid=dbharris keyfingerprint
<snip>
# dbharris, users, debian, org
dn: uid=dbharris,ou=users,dc=debian,dc=org
<snip>
# dbharris, users, debian, org
dn: uid=dbharris,ou=users,dc=debian,dc=org
@@
-47,7
+47,7
@@
return. If you only specify the query, but don't provide any attributes to
return, all readable attributes are returned. While the example was quite
simple, complex queries can be performed as well:
</p><pre>
return, all readable attributes are returned. While the example was quite
simple, complex queries can be performed as well:
</p><pre>
-[ dbharris@
ravel: ~/ ]$ ldapsearch -x -H ldap
://db.debian.org -b dc=debian,dc=org '(&(!(loginshell=/bin/bash))(uid=*))' loginshell
+[ dbharris@
people: ~/ ]$ ldapsearch -x -H ldaps
://db.debian.org -b dc=debian,dc=org '(&(!(loginshell=/bin/bash))(uid=*))' loginshell
</pre>
<p>
</pre>
<p>
@@
-55,7
+55,7
@@
That query shows users that do not use bash as their shell. Some other
interesting queries are:</p>
<ul>
<li>Count the number of developers
interesting queries are:</p>
<ul>
<li>Count the number of developers
-<tt>(&(keyfingerprint=*)(
gidnumber=800
))</tt></li>
+<tt>(&(keyfingerprint=*)(
supplementaryGid=Debian
))</tt></li>
<li>Show people in a certain group <tt>gidmembership=adm</tt></li>
<li>People named james <tt>cn=james</tt></li>
<li>Someone whos last name phonetically sounds like 'Ackerma'
<li>Show people in a certain group <tt>gidmembership=adm</tt></li>
<li>People named james <tt>cn=james</tt></li>
<li>Someone whos last name phonetically sounds like 'Ackerma'