[phpGroupWare-users] phpGW for Unix users managed by LDAP

[Emanuel Ziegler]

Hi,

I'm running a Debian (sarge) web server with Apache2 for our institute. The 
installation of phpGroupWare was simple, but the configuration does not seem to 
fit perfectly. I got the following problems:

1) eMail: The eMail-server is a Courier IMAP server that stores its mails via 
Postfix in ~/Maildir. Direct access to the maildir does not seem to be 
supported, but the IMAP needs a password although it is the same as the user 
password. This forces the users to enter it by themselves and it does not run 
out of the box for them.

2) Password changes: Users are forced to change their password after first 
login. This is uncomfortable and should be deactivated (since  it is their 
login password).

3) LDAP: I managed to allow logins by LDAP and store additional information in 
a MySQL database. However, I needed to enter the LDAP admin password although I 
don't want phpGroupWare to change any entry, don't want unencrypted connections 
to the server transmitting this password. The information needed (users, 
groups, passwort authentication) is accessible without admin rights, so why the 
need for the password?

4) UID, GID, Groups: Currently only authentication is done via LDAP. As soon as 
a user logs in, an account on MySQL is created with a new numeric UID, 
independent group managment and home directories. I want, however, 
phpGroupAdmin to use the information stored in the posixAccount and posixGroup 
classes of the LDAP. In principle this information is available via PAM as well.

5) Filemanager: I'd like to allow the users access to their home directories 
instead of creating new home directories without content. Apart form that the 
home directory seems to be set to /home/$user which is very inconvenient, since 
the home directories are automaounted to /home in the format 
/home/$server/$number/$user.

Sorry for the amount of questions. Maybe there are simple answers to this - I 
guess not so uncommon - problems.

Thanks,
    Emanuel
Sent from the phpGroupWare forums @ http://forums.phpGroupWare.org