[H-SASIG] Online Payments / Membership DB people -- what role for LDAP? (was Re: [SysAdmin] #3: Trac authentication needs to be simple, easy, and automated)

[Raymond Smith]

Folks,

Please see Brad's updates to Trac ticket #3 as well as his earlier
email to this list. Basically the LDAP stuff is coming along, but Brad
needs to know how we are going to feed it and what if any other
systems we want tied to it for authentication purposes. Please respond
to this email.

Brad -- my thoughts are below.

1. Trac roles: I agree we should leave these out of LDAP for now.

2. Account Source: we have a few different options.

I think Trac has a module that allows for user registration (usual
multi-step process similar to Mailing list subscription). I would be
happy to just use that to get user accounts into LDAP for use with
Trac.

The other obvious option is to pull data from the membership database.
Those plans seem to be in a state of flux. I guess we need other
peoples opinions on this point.

3. Where else to use LDAP?

Really, I just want it for Trac :-) But the other obvious places would
be Wiki authentication and email alias management. But, again, would
like to hear others opinions before anyone makes this happen.

Cheers,

Raymond