notes from charles' ldap lecture...

http://www.openldap.org/

ldbm - backend database they used; they didn't use mysql
schema is extended in the slapd.conf by including different modules... including
samba, kerberos, blah blah
once you add a module, you have to modify the schema for each entry manually.

ACL are supported but not used. iptables works.
extending directory to include arts?

update Exchange global address book from design's ldap server.
who is in their directory? staff and faculty? only teaching faculty?

gq - good linux ldap modify tool.

No Apps for you! Stop users from installing apps

[...] To restrict users from installing software on one computer, you need
to change permissions for the HKEY_LOCAL_MACHINE\SOFTWARE Registry key.
Run regedt32, select the SOFTWARE key, select Permissions from the Security
drop-down menu, and select the users you want to set permissions for.
the default Special Access permissions for the Everyone group let users
perform all Registry functions except creating a link to another key,
changing the key's permissions (which the Write Discretionary Access
Control­DAC­check box controls), and changing the key's ownership. To
prevent users in the Everyone group from installing new software without
preventing them from using the software that the SOFTWARE key lists, you
need to remove their Set Value and Create Subkey permissions.

Change the Everyone group's permissions from Special Access to Read. Then,
users in the group will have only Query Value, Enumerate Subkeys, Notify,
and Read Control permissions. [...]

And now, the first actual entry.

Changing the window name of the NAL

TID 10019242 reads:

/c= will change the title of the Application Launcher window's title bar. You can also use macros to pull NDS information. For example, NAL /c="ACME Applications for %CN%", will display "ACME Applications for Admin" when user Admin logs in (instead of the default of "Novell-delivered Applications for .Admin.Novell").