Software Evaluation: ps1auth

Pumping Station: One and hef have worked quite a bit on a Django app that can manage members. Maybe we should use it.

Deploying a test VM

hef merged my pull request that broke the vagrant setup, so just check out the code from https://github.com/hef/ps1auth and follow the readme. Works great.

Questions and stuff

• How do we make new users? I figured out how to add someone, but the User field is greyed out.
  • (thanks to loans): When a user goes to the login screen and clicks Activate, it sends an email. The email looks like this (in the VM, you'll find it in /vagrant/cache/mail):

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Subject: PS1 Account Activation
From: noreply@pumpingstationone.org
To: user@test.com
Date: Tue, 10 Feb 2015 03:55:42 -0000
Message-ID: <20150210035542.1587.78618@archlinux.vagrant.vm>

Your activation link is:
http://example.com/zinc/activate/confirm/d3bf02c9-9f5e-45d9-b163-2ec1aad79144

The user clicks that link, and is prompted to type in a username of their preference and a password.

Stuff we kind of need to figure out on our own

• This appears to speak LDAP, what happens if we point it at FreeIPA/389-ds instead of Samba4/AD?
  • It appears that ps1auth uses the objectGUID attribute to link users internally to AD accounts, which afaik is an Active Directory extension.
• I (cswingler) need to get around to reading up on deploying Django apps so I can deploy this on something that's not Arch.