tutos-devel Mailing List for TUTOS

Hi list,

There is no end ! again a new feature.

I've added just another way for user authentification to TUTOS. See CVS !=
!
On systems that are using PAM for user authentifiacation you may use it f=
or=20
TUTOS.

Some steps:
1. Compile your PHP with PAM support
   see http://www.math.ohio-state.edu/~ccunning/pam_auth.html for details
2. set pamauth to 1 in config.pinc
3. set pamservice to the name of an existing pam group (see /etc/pam.d) o=
r=20
create a new one
4. restart
5. login using your normal system password

This mechanism requires that the TUTOS account names are the same as on y=
our=20
system (or whereever PAM looks for it)

On my development system it was neccessary that the apache process user h=
as=20
read permissions to /etc/shadow !!

Again pleas test and have fun

Gero

On Mon, Apr 15, 2002 at 09:05:53PM +0200, Gero Kohnert wrote:
> Welcome and thanks.
> I"ve added your (with minimal editing by me) patch to the CVS and now ask 
> everybody who is interessted in this feature to test it.
As you probably just seen, I'm using the SF account you added in the dev
team list :)
First correction concern the config parameter $tutos[ldapauth_anonymous], 
wich is now the boolean you expected...

> > basedn: used for the user search
> > binddn: where to find the LDAP account properties for non anonymous
> >         binding
> > userdn: RDN of the tutos users (uid=dfontaine)
> BTW what does RDN stand for.
It's the Relative Distinguished Name, as opposed to the DN...
Same differenence as between relative file name and absolute one.
Here, that means that the userdn will be added to the basedn to form the
DN (absolute) where to find the $uname.

> > The encryption method works fine here, I suppose that will work for you
> > too, but can't test...
> I"m not sure but crypt is something that PHPs configure script checks for and 
> so we maybe should check if that function really exists.
We could, but as the choice of encrypted passwd is given in the config,
I suppose that the admin installing tutos will assure coherence of the
install and make sure is PHP install provide the crypt functions when he
needs them in tutos !

-- 
Dimitri
http://tapoueh.free.fr

Tout ce qui est public devrait être gratuit.
L'ecole, les transports et les filles.
	-- Alphonse ALLAIS

On Monday 15 April 2002 14:07, you wrote:
> On Fri, Apr 12, 2002 at 06:47:32PM +0200, Raphael Pierquin wrote:
> > Dimitri Fontaine (id:tapoueh) is working on the merge. His
> > check_auth_ldap supports non anonymous bind to the server, hashed
> > password, and configurable RDN. He'll send a patch next Monday.
>
> Hello there.
> As promised, here is the patch ! Find in attachment the cvs diff output
> and the new permission.p3.

Welcome and thanks.
I"ve added your (with minimal editing by me) patch to the CVS and now ask=
=20
everybody who is interessted in this feature to test it.

> basedn: used for the user search
> binddn: where to find the LDAP account properties for non anonymous
>         binding
> userdn: RDN of the tutos users (uid=3Ddfontaine)

BTW what does RDN stand for.

> The encryption method works fine here, I suppose that will work for you
> too, but can't test...

I"m not sure but crypt is something that PHPs configure script checks for=
 and=20
so we maybe should check if that function really exists.



Gero


--=20
Gero Kohnert               =20
91058 Erlangen           =20
Germany                     =20
                              http://www.tutos.org

On Fri, Apr 12, 2002 at 06:47:32PM +0200, Raphael Pierquin wrote:
> Dimitri Fontaine (id:tapoueh) is working on the merge. His
> check_auth_ldap supports non anonymous bind to the server, hashed
> password, and configurable RDN. He'll send a patch next Monday. 
Hello there.
As promised, here is the patch ! Find in attachment the cvs diff output
and the new permission.p3.

Note that the ldap config does not feet the needs of an ldap auth
config, look at the new ldapauthserver config parameters !

If you use LDAP you should know what the conifg fields are for, but i
will try to explain some here:

basedn: used for the user search
binddn: where to find the LDAP account properties for non anonymous
        binding
userdn: RDN of the tutos users (uid=dfontaine)

The encryption method works fine here, I suppose that will work for you
too, but can't test...

Enjoy LDAP AUTH,
-- 
Dimitri
http://tapoueh.free.fr

Ceux qui peuvent renoncer à la liberté afin d'obtenir une légère et
temporaire sécurité ne méritent ni l'une, ni l'autre.
	-- B. Franklin, 1759

Hello,

Does any-one have an idea about implementing templates in TUTOS?
Should we use a TEX file , pipe it through 'sed' and automatically store it 
in the database?
Or should we try to use the OpenOffice fileformat, pipe it through 'sed', 
etc.?

Or just plain old ascii? :-)

kind regards,


-- 
  Jeroen Baten            | EMAIL :  JE...@I2...
 ____  _  __              | web   :  www.i2rs.nl
  |  )|_)(_               | tel   :  +31 (0)30 221 00 11
 _|_/_| \__)              | fax   :  +31 (0)30 220 31 91
           Kometenlaan 26, 3721 JT, Bilthoven

Hi,

We were about to send a patch of our way of doing ldap authentication
when you committed yours !

Dimitri Fontaine (id:tapoueh) is working on the merge. His
check_auth_ldap supports non anonymous bind to the server, hashed
password, and configurable RDN. He'll send a patch next Monday. 

BTW, I forgot to introduce myself to the list : I work a CVF, a french
company, and we're tuning tutos for our own use.  We'll contribute
back our modifications.  So far, two of us are working on tutos :
Dimitri Fontaine and I (less intensively).

Cheers,
--
Raphael Pierquin


On Fri, Apr 12, 2002 at 04:27:00PM +0200, Gero Kohnert wrote:
> Hi list,
> 
> here are some notes about the latest changes in the CVS tree.
> 
> I have played a little bit with ldap and prepared hopefully everything for a 
> ldap authentification of TUTOS users in the future.
> 
> To use LDAP-auth you have to do:
> 
> 1. define your ldap server as the server with index 0 in config.pinc
> 2. set $tutos[ldapauth]  to 1 in config.pinc
> 3. FIX and TEST the  check_auth_ldap function in permission.p3
> 
> The third step is the most important one. I for myself have nearly no 
> experience with ldap and so I have no idea how to make a good (functioning in 
> most environments) LDAP authentification.
> 
> If someone with better knowledge on LDAP is reading this. Pleas jump in and 
> help !!
> 
> have a nice weekend
> 
> Gero
> 
> 
> PS: all the other changes in CVS since the last release are mainly fixes of 
> user reported bugs.
> 
> _______________________________________________
> TUTOS-devel mailing list
> TUT...@li...
> https://lists.sourceforge.net/lists/listinfo/tutos-devel
> 
> 

--->[Quoting Gero Kohnert <Ger...@t-...>:]

> If  someone with  better knowledge  on LDAP  is reading
> this. Pleas jump in and help !!

Hello,  Gero. I  was  big fan  of  LDAP central  password
repository, but during one year  of practising it, I have
moved everything  to database  (postgres or  mysql). Why?
Lackness of libraries and tools related to LDAP.

So  -  my  proposition  is  to  extend  Tutos  of  method
of  external  authorisation,  eg.  possiblity  of  taking
passwords from other then default database and table.

-- 
      http://ibiblio.org/ser/ | http://it-zone.org/ 
_________________________________________________________
tldp.org|gnu.org|hyperreal.info|pld-linux.org|it-zone.org
  "The moon is made of green cheese." -- John Heywood

Hi list,

here are some notes about the latest changes in the CVS tree.

I have played a little bit with ldap and prepared hopefully everything fo=
r a=20
ldap authentification of TUTOS users in the future.

To use LDAP-auth you have to do:

1. define your ldap server as the server with index 0 in config.pinc
2. set $tutos[ldapauth]  to 1 in config.pinc
3. FIX and TEST the  check_auth_ldap function in permission.p3

The third step is the most important one. I for myself have nearly no=20
experience with ldap and so I have no idea how to make a good (functionin=
g in=20
most environments) LDAP authentification.

If someone with better knowledge on LDAP is reading this. Pleas jump in a=
nd=20
help !!

have a nice weekend

Gero


PS: all the other changes in CVS since the last release are mainly fixes =
of=20
user reported bugs.

Op woensdag 10 april 2002 08:22, schreef Ger...@t-...:
> On Tue, Apr 09, 2002 at 08:20:15PM +0200, Jeroen Baten wrote:
> > > > switch that  the defined  users could chnage  by there
> > > > own like the popup feature.  And please compact the 12
> > > > files into one.
> > >
> > > Because name days are of  course localized, I propose to
> > > use  namedays.pl  file  for  Polish, is  it  good  idea?
> > > Then  it could  be  translated to  other languages,  eg.
> > > namedays.en for English and so on.
> >
> > Why not add them to the language files us.p3 etc.?
>
> No I think additional 364 entries in the language files are not a
> good idea and for sure there are languages/regions where namedays
> are unknown.

My appoligies. I thought namedays were 'monday', 'tuesday', etc.

>
> But we should not use the language key as an extension. A file
> namedays_pl.p3 for polish would be better, because pl is the typicall
> perl extension and I swear that there are servers out that make
> some special handling with (asumed) perl files.

agree


-- 
  Jeroen Baten            | EMAIL :  JE...@I2...
 ____  _  __              | web   :  www.i2rs.nl
  |  )|_)(_               | tel   :  +31 (0)30 221 00 11
 _|_/_| \__)              | fax   :  +31 (0)30 220 31 91
           Kometenlaan 26, 3721 JT, Bilthoven

On Tue, Apr 09, 2002 at 08:20:15PM +0200, Jeroen Baten wrote:
> >
> > > switch that  the defined  users could chnage  by there
> > > own like the popup feature.  And please compact the 12
> > > files into one.
> >
> > Because name days are of  course localized, I propose to
> > use  namedays.pl  file  for  Polish, is  it  good  idea?
> > Then  it could  be  translated to  other languages,  eg.
> > namedays.en for English and so on.
> 
> Why not add them to the language files us.p3 etc.?

No I think additional 364 entries in the language files are not a 
good idea and for sure there are languages/regions where namedays 
are unknown.

But we should not use the language key as an extension. A file
namedays_pl.p3 for polish would be better, because pl is the typicall
perl extension and I swear that there are servers out that make
some special handling with (asumed) perl files.


Gero

Op dinsdag 9 april 2002 19:20, schreef --s+:
> --->[Quoting Gero Kohnert <gok...@us...>:]
>
> > > i can make the code, if you want me to.
> >
> > OK. That should  be defined as another  feature with a
> > switch that  the defined  users could chnage  by there
> > own like the popup feature.  And please compact the 12
> > files into one.
>
> Because name days are of  course localized, I propose to
> use  namedays.pl  file  for  Polish, is  it  good  idea?
> Then  it could  be  translated to  other languages,  eg.
> namedays.en for English and so on.

Why not add them to the language files us.p3 etc.?

-- 
  Jeroen Baten            | EMAIL :  JE...@I2...
 ____  _  __              | web   :  www.i2rs.nl
  |  )|_)(_               | tel   :  +31 (0)30 221 00 11
 _|_/_| \__)              | fax   :  +31 (0)30 220 31 91
           Kometenlaan 26, 3721 JT, Bilthoven

Op dinsdag 9 april 2002 19:29, schreef --s+:
> --->[Quoting Gero Kohnert <gok...@us...>:]
>
> > > and  another idea:  to  display  birthday of  person
> > > listed  in  addresses  in   calendar  (it  could  be
> > > selected by team, etc.).
> >
> > I was thinking about realizing such a feature by using
> > the watchlist  mechanism. If someone add  a address to
> > his/her  watchlist he/she  should get  a mail  on that
> > birthday  and the  birthday  should be  marked in  the
> > calendar pages.
> >
> > What do you think ?
>
> Hmm. I prefer  to simpler way, but if you  like to spend
> more time on coding - OK! :-)

Actually Gero is right. Imagine a large company with a lot of people in the 
database. I could be interested in the birthday of some salesguy allthough 
I'm not the one who originally entered him/her in the database. I have been 
thinking about this feature to and think Gero is right in using the watchlist.

-- 
  Jeroen Baten            | EMAIL :  JE...@I2...
 ____  _  __              | web   :  www.i2rs.nl
  |  )|_)(_               | tel   :  +31 (0)30 221 00 11
 _|_/_| \__)              | fax   :  +31 (0)30 220 31 91
           Kometenlaan 26, 3721 JT, Bilthoven

--->[Quoting Gero Kohnert <gok...@us...>:]

> > and  another idea:  to  display  birthday of  person
> > listed  in  addresses  in   calendar  (it  could  be
> > selected by team, etc.).
>
> I was thinking about realizing such a feature by using
> the watchlist  mechanism. If someone add  a address to
> his/her  watchlist he/she  should get  a mail  on that
> birthday  and the  birthday  should be  marked in  the
> calendar pages.
>
> What do you think ?

Hmm. I prefer  to simpler way, but if you  like to spend
more time on coding - OK! :-)

-- 
     http://ibiblio.org/ser/ | http://it-zone.org/            
________________________________________________________
linuxdoc.org|gnu.org|hyperreal.pl|pld.org.pl|it-zone.org
  "The moon is made of green cheese." -- John Heywood

--->[Quoting Gero Kohnert <gok...@us...>:]

> > i can make the code, if you want me to.
>
> OK. That should  be defined as another  feature with a
> switch that  the defined  users could chnage  by there
> own like the popup feature.  And please compact the 12
> files into one.

Because name days are of  course localized, I propose to
use  namedays.pl  file  for  Polish, is  it  good  idea?
Then  it could  be  translated to  other languages,  eg.
namedays.en for English and so on.

-- 
     http://ibiblio.org/ser/ | http://it-zone.org/            
________________________________________________________
linuxdoc.org|gnu.org|hyperreal.pl|pld.org.pl|it-zone.org
  "The moon is made of green cheese." -- John Heywood

> and another  idea: to display birthday  of person listed
> in addresses in calendar (it  could be selected by team,
> etc.).

I was thinking about realizing such a feature by using the watchlist=20
mechanism. If someone add a address to his/her watchlist he/she should ge=
t a=20
mail on that birthday and the birthday should be marked in the calendar p=
ages.

What do you think ?


Gero

> what do you think about adding name days to calendar?
> i've got it in text files, 12 files, each line of
> file represents one day.

I think that would be a nice addition for all those people who celebrate =
name=20
days (not me).

> i can make the code, if you want me to.

OK. That should be defined as another feature with a switch that the defi=
ned=20
users could chnage by there own like the popup feature.
And please compact the 12 files into one.


Gero

and another  idea: to display birthday  of person listed
in addresses in calendar (it  could be selected by team,
etc.).

-- 
     http://ibiblio.org/ser/ | http://it-zone.org/            
________________________________________________________
linuxdoc.org|gnu.org|hyperreal.pl|pld.org.pl|it-zone.org
  "The moon is made of green cheese." -- John Heywood

hello gero,
what do you think about adding name days to calendar?
i've got it in text files, 12 files, each line of
file represents one day. 

i can make the code, if you want me to.

-- 
     http://ibiblio.org/ser/ | http://it-zone.org/            
________________________________________________________
linuxdoc.org|gnu.org|hyperreal.pl|pld.org.pl|it-zone.org
  "The moon is made of green cheese." -- John Heywood

<meta>This is the continuation (part 1) of a thread of e-mails between
Gero and I about my tutos features wishlist/todolist.</meta>

Hi all,

On Thu, 04 Apr 2002 08:30:11 +0200 Gero wrote :

> On Fri, Mar 29, 2002 at 12:36:08PM +0100, Raphael Pierquin wrote:
>
> > - get rid of what we don't need (for example, we don't need
> >   invoicing, but invoicing fields are still available in task
> >   creation page, even if invoicing is disabled).

> That's somethng I don't underdstand. What invoice fields in task
> creation do you talk about ? If invoicing is disabled you should see
> nothing at all.

Actually, the fields i'm talking about are only related to invoicing,
not part of invoice data.
They deal with price, and cost...  "Cost management", that's
what is is about.  And we don't need cost management.

Can we assume that people who have invocing disabled don't want cost
management either?

If so, we could hide any cost related in "task" pages and "book time"
pages, if useinvoice is not seeable by current user.

If not, should we add another entry in configuration and acls for
usecostmanagement ?

Cheers,
--
Raphael Pierquin
Project Manager
CVF, France

Hi,

I just submitted a patch for the French language file (via
sourceforge).

I didn't add any accent although all of them are missing.
Is there a reason for that ?  Shall I fix it ?

BTW, what is the prefered way to send a patch (send attachement to
this list ? or via sourceforge patch queue ? what format for
diff files ?..)

Cheers,
--
Raphaël Pierquin