TodoList

install commercial LDAP tool
LDAP via TLS
- the relevant configuration files are /etc/libnss-ldap.conf and /etc/pam_ldap.conf
  - Currently libnss-ldap is configured with ldaps:// and pam_ldap is configured with ldap://
  - changing the protocol in pam_ldap.conf breaks root login ?!?!
  - disabling nscd (the caching daemon) makes non-LDAP accounts vanish altogether ?!?!
    - => need to understand PAM system better
- Samba still needs LDAP over TLS support (I (tblass) won't do it since I cannot test it properly)
- *ALL* services are currently not checking the certificate, as slapd on hyperion is not set up for it.
  - james:/etc/ldap/ldap.conf: TLS_REQCERT never
redmine issues
- reporters sometimes cannot see clone URL
- reporters sometimes can push
gosa cannot connect to the mail server on james
organise sysad wiki and remove outdated user info
upgrade secretary workstation to Win 10
migration of email, dns, dhcp
- talk to HIZ people to align options and available features (jonas)
issues on james:
- lots a failed login attempts (same source, short tiemspan) even though fail2ban is running (I (tblass) have been successfully locked out)
issues on hyperion
- "Suppressed <Num> messages from /system.slice/slapd.service", often several 100s, why?
gosa transition
- gosa.ps.uni-saarland.de redirects to hyperion, which presents the wrong certificate. Fix this
- hyperion is not reachable by HTTP (HIZ firewalling rule). This means that manually entering gosa.ps.uni-saarland.de doesn't work. Ask HIZ to open the firewall and redirect all HTTP traffic to HTTPS (like on james). (JONAS)