[TriLUG] Info on trilug's single signon setup?

[Mark Kempster]

Thanks to all the smart folks at trilug, I've been able to set up a
bevy of services hosted from home, that in general make life just
a bit better. Things like web (and gallery), mail, dav-protected
calendars, bugzilla and subversion; nothing major.

I'm hosting things for just a handful of folks, and am realizing that
I configured the pieces mostly from HOWTOs and the like, which were
all been focused on getting their particular widget installed with
minimal fuss. I'm getting annoyed at all the different management
(especially account / passwords!) knobs to turn.

That being said, I'm ready to graduate to something a bit more
industrial-strength. After some light reading, it seems that ldap
can be the foundation for some services (I'm interested mostly in
webdav, svn, ssh, imap, smtp). From the admin side, I'm looking for
a single method of authentication where users can manage their
own accounts (read: change their own passwords).

I _think_ Trilug's infrastructure went through something similar
(though presumably a bit more involved) with the single sign-on
infrastructure that was implemented.

http://www.trilug.org/pipermail/trilug/Week-of-Mon-20020729/009433.html
explains some of the reasoning.

Are there any Trilug resources (notes, presentations, config files)
around to shed light on the overall picture and the moving parts of
this infrastructure?

If not, is this the sort of topic good for a mini-course?

Thanks
- Mark