start on ldap things
make it possible to add extra things to the headers, add all the js we need (I think)
oops
also oops
and again oops
error validation, mostly works, need some way of actually getting the stuff into ldap now...
we are not the wiki page
more validation
actually do the ldap adding bits. Needs the smbldap-tools installed and working
don't let people use certain names, better escaping etc.
don't print the hashes etc
make the gecos field the username for want of anything better
store the username and hashes in the main site database
add ldap support to the reconcile script, XXX needs to run as root now for smbldap-userdel...
make the uid be lhs member id + 2000
since we have people with lhsid's over 2000 (the highest at the moment is 5578) use 100000 instead of 2000 as the baseuid, afaict everything has 32bit uid's these days anyway. (10000 would leave us with an lhsid-10k problem).
create a group per user
add support for choosing a login shell
put all the smbldap-tools patches in one place
instead of sudo'ing to root, change group to ldapadmin and give group ldapadmin read access to the smbldap_bind.conf config file so it can get credentials