[Feature Request] Webchart Integration

[runleveldev]

Creating this as a tracking ticket for the work needed to integrate with a Webchart system. There are 2 main goals:

1. Ensuring the Webchart system has some way to record LDAP user account information (ie. uidNumber, gidNumber, etc.)
2. Ensuring this LDAP Server has a way to query that information

The above two goal MUST be accomplished without direct schema modification to the Webchart database. I do not know how customizable the "user" datatype in Webchart is and so we may have to rely on the Employee chart. We will likely need to engage a Webchart SME on how best to integrate this feature.

[runleveldev]

The following table catalogs data that is required by this server and if/where it can be found in the Webchart schema currently. This is just to get a baseline for what modifications may be needed. The required attributes are taken from https://github.com/mieweb/LDAPServer/blob/main/src/utils/ldapUtils.js however we may be able to modify this list.

Attribute	Exists?	Where
dn	Yes	Derived from uid and $LDAP_BASE_DN
uid	Yes	users.username
uidNumber	Yes	users.user_id
gidNumber	Yes	SELECT realms.realm_id FROM realms JOIN users ON realms.realm = users.realm
cn	Yes	users.first_name
gecos	Yes	Derived from cn and sn
sn	Yes	users.last_name
mail	Yes	users.email
homeDirectory	Yes	Derived from uid
loginShell	Yes	Static "/bin/bash"
shadowLastChange	Yes	Static "1"
userPassword	No	Technically users.password but this is unused in our deployment

[runleveldev]

It looks like this project is using rfc2307 schema for the LDAP response, ie. memberUid for posixGroup membership determination. I believe we want group membership to be based on Department (aka. realm) in the Webchart schema. So for group attributes I believe the following mapping can be used.

Attribute	Exists?	Where
cn	Yes	realms.realm
gidNumber	Yes	realms.id
memberUid	Yes	SELECT users.username FROM users JOIN user_realms ON users.user_id = user_realms.user_id WHERE user_realms.realm = ?

[runleveldev]

I'll see if we can engage a Webchart SME on resolving the need for uidNumber and gidNumber in the Webchart schema. We could naively use users.user_id and realms.id (with users.realm to determine the user gidNumber) but I expect that would cause issues with existing Linux passwd entries.

[runleveldev]

I have updated the earlier tables with information from the previous comment. Let's go with that architecture for now and deal with fallout from nessecary UID/GID changes as they come.

[runleveldev]

This is now possible for an administrator to configure using the customization added by #104