Replace compiled .html with .wml source from the db.d.o cvs repository

[mirror/userdir-ldap-cgi.git] / html / doc-general.wml

diff --git a/html/doc-general.wml b/html/doc-general.wml
new file mode 100644 (file)
index 0000000..ed90b74
--- /dev/null
+++ b/html/doc-general.wml
@@ -0,0 +1,56 @@
+#use wml::db.d.o title="General LDAP Documentation"
+
+<p>
+debian.org uses a single LDAP driven directory for account management across
+all the project run <a href="/machines.cgi">machines</a>. This directory
+also provides services for leaving vacation notices, updating
+<a href="http://www.debian.org/devel/developers.loc">xplanet</a> coordinates,
+email forwarding, ssh authentication keys and other information.
+
+<p>
+Note: the 'passwd' program and 'chfn' do not work with LDAP information.
+Please use the web page or email gateway for the time being. All machines 
+running OpenSSH are using replicated SSH RSA authentication keys.
+
+<h1>Security and Privacy</h1>
+<p>
+Three levels of information security are provided by the database. The first
+is completely public information that anyone can see either by issuing an
+LDAP query or by visiting the web site. The next level is
+<em>developer-only</em> information that requires the search to be
+performed from a .debian.org machine (see <a href="doc-direct.html">this
+tutorial</a> on how to use ldapsearch from a .debian.org machine for a
+direct connection to the LDAP daemon) or from the web interface after
+one has authenticated themselves as a Debian Developer. The final level is
+<em>admin-only</em> or <em>user-only</em> information; this
+information can only be viewed by the user or an administrator.
+
+<p>
+<em>developer-only</em> information includes precise location information
+[postalcode, postal address, lat/long] telephone numbers, and the vacation
+message.
+
+<p>
+<em>Admin-only/user-only</em> information includes email forwarding,
+ssh keys and
+the encrypted password. Note that email forwarding is necessarily publicly 
+viewable from accounts on the actual machines.
+
+<p>
+Entries in the directory are keyed to the developers PGP key, whoever has that
+key can make any change to the directory through the mail interface.
+
+<h1>Access</h1>
+<p>
+The directory has several means to access it:
+<ul>
+<li><a href="https://db.debian.org/login.html">SSL Web Forms</a>
+<li>Finger gateway, <tt>finger foo@db.debian.org</tt>
+<li>GPG key gateway, <tt>finger foo/key@db.debian.org</tt>
+<li><a href="doc-mail.html">Mail gateway</a>
+<li><a href="doc-direct.html">Direct LDAP Access</a>
+<li>LDAP command line tools such as <tt>ud-info</tt>
+</ul>
+
+<p>
+<a href="password.html">Lost or forgotten password instructions</a>