1#@!#!123s

: / usr / share / doc / cpanel-php73-turba /
Filename : LDAP
back
Turba LDAP personal addressbook HOWTO
=====================================

This HOWTO is a bare bones list of what has to be done to implement a personal
adressbook through ldap for turba.

The howto is based on a setup where both the addressbook and the users are
stored on the same LDAP server.

This is not comprehensive, but it notes how some users have implemented
personal LDAP address books.

1. Configure ``turba/config/backends.php``.

   Note that OpenLDAP and some other LDAP servers use UTF8 to encode its data,
   so you should have ``encoding = 'utf8'`` set in the parameters for your
   LDAP address book source.

   There is an example of personal address books in
   ``turba/config/backends.php.dist``.  You will have to modify it to to match
   the fields, settings, and schema of your LDAP server, but it's a solid
   place to start.

2. Enforce ACLs to personal address books.

   Add this to your LDAP ACL so users can only see their own address book::

     access to dn="ou=(.+), ou=personal_addressbook, dc=example, dc=com"
         by dn="uid=$1, dc=example, dc=com" write
         by * none

   .. Note:: This assumes that you store your users in the same LDAP
             directory. If not, modify appropriately for your setup.

3. Make ``ou``'s for all of your users.

   You'll also have to add this to the script you use to add users to your
   LDAP directory.

   ``turba/scripts/ldap/addou.pl`` is a starting point; you will need to edit
   it to fit your needs. Copy both it and the ``addou`` shell script to
   ``/home``.  Then run ``./addou`` and all the different names of the
   catalogues will be added to the ldap tree as new ``ou``'s to store
   addresses in. You should probably delete any entries that do not belong
   there (for instance, ``/home`` directories for mysql and other daemons
   created by some distributions).


Entries for Turba-specific information (contact groups) from horde/scripts/ldap/horde.schema::

   #
   # Turba attribute branch 1.3.6.1.4.1.13040.4.1.*
   #
   attributetype ( 1.3.6.1.4.1.13040.4.1.2
     NAME 'turbaType'
     DESC 'Turba Object Type: Contact/List'
     EQUALITY caseIgnoreIA5Match
     SUBSTR caseIgnoreIA5SubstringsMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{8} )

   attributetype ( 1.3.6.1.4.1.13040.4.1.3
     NAME 'turbaMembers'
     DESC 'Encoded members of a Turba list'
     EQUALITY caseIgnoreIA5Match
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4000} )

   attributetype ( 1.3.6.1.4.1.13040.4.1.4
     NAME 'turbaPGPPublicKey'
     DESC 'PGP/GPG Public Key'
     EQUALITY caseIgnoreIA5Match
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4000} )


Entries for calendaring information (free/busy, etc.) from RFC 2739::

   attribute (1.2.840.113556.1.4.478
     NAME 'calCalURI'
     DESC 'Snapshot of users entire default calendar'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.479
     NAME 'calFBURL'
     DESC 'URI of the uses free and busy information'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.480
     NAME 'calCAPURI'
     DESC 'URI used to communicate with the users calendar'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.481
     NAME 'calCalAdrURI'
     DESC 'URI to which event requests should be sent for the user'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.482
     NAME 'calOtherCalURIs'
     DESC 'URIs to non-default calendars belonging to the user'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.483
     NAME 'calOtherFBURLs'
     DESC 'URIs to non-default free and busy information files'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.484
     NAME 'calOtherCAPURIs'
     DESC 'URIs for communicating with non-default calendars'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   attribute (1.2.840.113556.1.4.485
     NAME 'calOtherCalAdrURIs'
     DESC 'Destinations for event requests to non-default calendars'
     EQUALITY caseIgnoreMatch
     SUBSTR caseIgnoreMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    )

   objectclass (1.2.840.113556.1.5.87
    NAME 'calEntry'
    DESC 'Calendering and Free Busy information'
    SUP top AUXILIARY
    MAY (calCalURI $ calFBURL $ calCAPURI $ calCalAdrURI $
         calOtherCalURIs $ calOtherFBURLs $ calOtherCAPURIs $
         calOtherCalAdrURIs
        )
    )