Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am running a Solaris 10 environment using Sun Directory Server (LDAP) 5.2 and now 6.3 for managing user accounts. So far I have been managing the environment via scripts to add users and groups but would like to pass this responsibility over to the help desk. Since they are not LDAP savvy I would like to give them something like a web front end to the People and Groups organizational units of the LDAP tree.

Can you suggest a suitable tool that would mask the complexities of LDAP from non-technical users but still enable them to manage the user accounts?

share|improve this question
up vote 8 down vote accepted

Maybe Gosa will fit... I haven't try it yet but it's on my TODO. From the homepage it says:

GOsa² provides a powerful GPL'ed framework for managing accounts and systems in LDAP databases. Using GOsa² allows system administrators to easily manage users and groups, fat and thin clients, applications, phones and faxes, mail distribution lists and many other parameters. In conjunction with FAI (Fully Automatic Installation), GOsa² allows the highly automated installation of preconfigured systems. GOsa² therefore provides a single, LDAP-based point of administration for large and small environments, thus making the administration of users and systems and all related parameters manageable and easy.

share|improve this answer
Thanks, I haven't heard about GOsa before, it looks interesting. I've got it in a Debian VM to test it against out LDAP directories. I'll comment on what I find out. – douglasj Jul 1 '09 at 2:20

We used phpldapadmin and JXplorer for "less" technical people to manage OpenLDAP, though YMMV for Sun's LDAP. Typically these were developers, but these tools are both pretty easy to learn sufficiently for managing users.

share|improve this answer
Thanks for the suggestions, I've looked at those before but they still let too much of the LDAP directory layout leak through to the Help Desk users. Good for our Admins though. – douglasj Jul 1 '09 at 2:21

Well, I was looking for a good Windows client to do some general LDAP queries and operations (when the raw power of ldapsearch on Unix environments was a chore). I stumbled upon Apache Directory Studio. Now, it is cross-platform, since it uses the very powerful Eclipse IDE framework as the base. Now granted, Windows or otherwise, it can be kind of crufty. However, it allows you to save a lot of settings for quick lookup. My personal favorite, it will save your different queries, for quick access to certain groups of users with similar attributes. Since it is a simple GUI app, this could easily reduce the LDAP complexities of Help Desk types. However, I have not used it extensively, only when it tickles my fancy. I guess others will chime in shortly.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.