Home › Forums › OS X Server and Client Discussion › Open Directory › Custom Schema combining attributes
- This topic has 6 replies, 2 voices, and was last updated 17 years, 6 months ago by
pingu.
-
AuthorPosts
-
September 19, 2007 at 11:34 am #369976
pingu
ParticipantHi,
Bit of a strange request, but someone may be able to help…
We’re just busy playing around with [url=http://www.webhelpdesk.com/]WebHelpdesk[/url] from MacsDesign Studio. It includes the capability to hook up to OD, AD and other LDAP directories, but unlike Casper, does not allow us to specify a custom objectClass for LDAP attribute mappings. Whilst this shouldn’t normally be a big problem, we also have Kerio’s schema extensions installed in our directory and therefore all of our email addresses are stored in the kerio-Mail-Address attribute rather than the EMailAddress attribute.
WebHelpdesk only allows us to map attributes to one schema, but I obviously need to map to both Kerio’s schema and the Apple standard. I realise I could include the Kerio schema as a part of the Apple one, but this is alreaady deployed and working well and I don’t want to mess with it.
I wondered therefore whether it is ppossible and if anyone knows how to create a custom schema that references attributes from other schemas? I could then deploy a “WebHelpdesk” schema that includes all the attributes I need and map directly to that. Is it also possible to have the schema append a set value to an attribute?
Any pointers much appreciated.
Cheers
DanSeptember 19, 2007 at 12:17 pm #369977pingu
ParticipantLooks like objectclassmap and attributemap could come in handy here if anyone can help me with the correct syntax or an example
September 19, 2007 at 1:03 pm #369980pingu
ParticipantThere doesn’t appear to be a way to give it a schema file. You give it the address and search base for the LDAP server and it can either detect schema or you can specify a custom schema name to use, but only one. When I tries using the list of object classes we use in Casper, it doesn’t like it at all and I lose all the clients.
I’ve got screen shots and the user docs I can mail if you’d like…
September 19, 2007 at 3:45 pm #369982pingu
ParticipantSo I did a bit of digging throught he existing schema files and the Netinfo one seemed to create some mapping stuff. Using that as a template I created the following file. I think that may do the job for me, but I’m loath to try without somebod telling me I’m either on the right track or heading for directory hell.
Any comments Joel or others?
[code]#
# Web Help Desk attribute mapping schema.
## Not sure if this is needed
#objectclassmap inetOrgPerson posixAccount shadowAccount apple-user extensibleObject
#
# or
#
#objectclassmap inetOrgPerson posixAccount shadowAccount apple-user extensibleObject organizationalPerson top person kerio-Mail-User#
# The LDAP attributes are mapped to custom ‘whd’ properties to allow
# use of a single schema in Web Help Desk
#attributemap whd_AuthAttribute dn
attributemap whd_username uid
attributemap whd_fullname givenName sn
attributemap whd_firstname givenName
attributemap whd_lastname sn
attributemap whd_emailprimary kerio-Mail-Address
attributemap whd_emailsecondary kerio-Mail-ForwardAddress
attributemap whd_phone1 telephoneNumber
attributemap whd_phone2 mobile
attributemap whd_location City
#attributemap whd_room
#attributemap whd_department [/code]September 19, 2007 at 5:07 pm #369985pingu
ParticipantAbsolutely. It’s not really even their attributes, they’re just ones I made up to get around not being able to search across multiple schemas/object classes.
Just gave my file server a bit of an upset trying it live! Whoops, guess I need to check why my replicas aren’t taking care of things…
BTW Do you know of any way I can append a string to the end of the mapped attribute before it is returned to the software?
I know that OpenLDAP 2.3 allows for use of the + and & symbols to concatenate and I noticed this line [code]# attributemap passwd userPassword appendPrefixTransform:{CRYPT} removePrefixTransform:{CRYPT}[/code] in the Netinfo schema. Basically the kerio-Mail-Address will return their primary email name and I need to tag a domain onto the end.
Any ideas?
-
AuthorPosts
- You must be logged in to reply to this topic.
Comments are closed