LDAP Account Manager

LDAP Account Manager is a web frontend for managing various account types in an LDAP directory. It was written in PHP.

Unlike programs such as phpLDAPadmin the focus is on the account- based management. The user receives a more abstract view of the LDAP directory. The program is licensed under the GNU General Public License.

Development

LDAP Account Manager ( LAM) was founded in February 2003. The first developers were Michael Dürgner, Roland Gruber, Tilo Lutz and Leonhard Walch Häusl. The goal of the project was the Managing Samba accounts. At this time, Samba LDAP already supported in the 2.x versions. Samba-3 was in the alpha stage, but there was no GUI for managing the accounts. Up to version 0.4.10 only Samba accounts could be managed. 2004 began developing a plug-in architecture to support more types of accounts. The first stable version of this architecture was LAM 0.5.0, which was released in September 2005. Since version 1.0.4 there is also a commercial version of LAM Pro. This contains a component which allows users to change their own data (eg password, phone number, ...) and supports additional LDAP objects (eg Zarafa, Kerberos, pPolicy, ...).

Functions

The main supported account types are Samba, Unix, Zarafa and pPolicy. The user can define templates for all account types, thereby setting default values. Individual accounts can be exported as PDF file. Furthermore, accounts can be created via a file upload. LAM also contains the tree view of phpLDAPadmin to edit the LDAP raw data. LAM has been translated into 16 languages.

Supported account types:

  • Unix
  • Samba 3.4
  • Zarafa
  • Kolab
  • Addessbucheinträge
  • Asterisk ( incl answering machine and Asterisk Extensions)
  • Mail routing
  • IMAP mailboxes (not via LDAP but via IMAP protocol)
  • Hosts
  • FreeRADIUS
  • Heimdal Kerberos
  • Authorized Services
  • Mail aliases
  • Group of (unique ) names
  • Aliases
  • IP and MAC addresses
  • SSH keys
  • Dateisystemquota ( in LDAP ( systemQuotas ) and external script )
  • DHCP
  • NIS objects / network groups
  • Automount entries
  • Password policies ( pPolicy )
  • Sudo roles
  • Qmail

The commercial version also includes a user self-administration. This allows users to change their own data to register accounts or reset passwords themselves.

Related software

  • OpenLDAP
  • Samba (software)
  • Kolab
  • Phpldapadmin.sourceforge.net