Suggestions for a LDAP Gui suitable for a help desk to manage users

I am running a Solaris 10 environment using Sun Directory Server (LDAP) 5.2 and now 6.3 for managing user accounts. So far I have been managing the environment via scripts to add users and groups but would like to pass this responsibility over to the help desk. Since they are not LDAP savvy I would like to give them something like a web front end to the People and Groups organizational units of the LDAP tree.

Can you suggest a suitable tool that would mask the complexities of LDAP from non-technical users but still enable them to manage the user accounts?

From serverfault douglasj

• We used phpldapadmin and JXplorer for "less" technical people to manage OpenLDAP, though YMMV for Sun's LDAP. Typically these were developers, but these tools are both pretty easy to learn sufficiently for managing users.

  douglasj : Thanks for the suggestions, I've looked at those before but they still let too much of the LDAP directory layout leak through to the Help Desk users. Good for our Admins though.
  From jtimberman

• Maybe Gosa will fit... I haven't try it yet but it's on my TODO. From the homepage it says:

  GOsa² provides a powerful GPL'ed framework for managing accounts and systems in LDAP databases. Using GOsa² allows system administrators to easily manage users and groups, fat and thin clients, applications, phones and faxes, mail distribution lists and many other parameters. In conjunction with FAI (Fully Automatic Installation), GOsa² allows the highly automated installation of preconfigured systems. GOsa² therefore provides a single, LDAP-based point of administration for large and small environments, thus making the administration of users and systems and all related parameters manageable and easy.

  douglasj : Thanks, I haven't heard about GOsa before, it looks interesting. I've got it in a Debian VM to test it against out LDAP directories. I'll comment on what I find out.
  From Julien