Enable LDAP PAM Config for UniClOGS Linux Images

[dmitri-mcguckin]

Enable LDAP PAM authentication to use ldap://ldap.eb.uniclogs.org for logins.

[dmitri-mcguckin]

@bryborge @ThirteenFish I'm out of the loop with exactly how you guys plan to image linux devices.

But my initial take is that this specific application would be best done with Ansible, this way we're not baking LDAP credentials into linux images.

[bryborge]

Hey @dmitri-mcguckin ! Sorry that you are out of the loop ... I'll give you a download of what I know/have been working on, and perhaps @ThirteenFish can jump in with corrections or anything I miss. :)

You mention Ansible, and that was definitely my first thought as well. I started laying the groundwork for that approach in PR #1 . I've not abandoned that, but I did decide to dive into some exploratory work with the rpi-image-gen library, which takes a different approach by baking raspberry pi flavored linux images that are already provisioned to whatever we want our specifications to be. That work is in PR #2 and that's the body of work I was talking about in the meeting today. I think it's a good approach for the raspberry pi platform, and I've listed out some of the considerations in the description of that PR. We can chat more about those specifics either on the PR or in Slack.

My current thinking is ... it doesn't matter which approach is taken (a full Ansible provisioning process on top of a basic base image, or using rpi-image-gen to generate a more custom-made image for UniClOGS), Ansible (or Puppet, or Chef or whatever is preferred) can be used to add LDAP PAM auth (outside the image, not baked in). But if I'm mistaken, please let know.