This app is made based on the experience of BzzWare AS, managing some handfull(s) of of installations base on Debian and DebianEDU Accessing lwat It is per default installed to be accessed from http(s)://(servername_or_ip)/lwat/ Login for the first time: When you set up your ldap-server in debian, normally there is created an account cn=admin,dc=domain,dc..., or in debian-edu cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no In debian-edu, the ldap admin password is by default the same as the unix-root password, on a normal debian-install you were prompted for the password when you set up ldap. There are 8 account-templates defined by default. Student, Teacher, jrAdmin and Admin, or for Debian Edu users with an old setup; oldStudent, oldTeacher, oldjrAdmin and oldAdmin. The differences are the ldap-schemas and objectClasses that are used: Student, Teacher, jrAdmin and Admin use these objectClasses: top posixAccount shadowAccount person courierMailAccount sambaSamAccount On Debian Edu, the objectClass courierMailAccount is missing (authlib.schema), and instead the private objectClass imapUser (courier.schema) is used. The objectClass imapUser is left out from the templates, since it's incompatible with the objectCLas person ( i think it was that objectClass). So these objectClasses are therefore used: top posixAccount shadowAccount person sambaSamAccount Creation of users homedir: This is done by a script that is running every 5 minutes by cron. If that is not soon enough for you, you may run it by hand as root: /usr/share/lwat/createhomedir You may also edit /etc/cron.d/lwat, to let the job run every minute or so ... OK, there is a lot of features that are still missing, namely removing user, disabling users and such. the features working are these: - Add user - Search user, and - Set new Password - change group membership - Change the full name of the user - Add Group - Search Group, and - select a user from within the group, and do the same as above - Rename group - Change description of the group