/[adm]/puppet/modules/pam
ViewVC logotype

Log of /puppet/modules/pam

View Directory Listing Directory Listing


Sticky Revision:

Revision 2937 - Directory Listing
Modified Tue Dec 18 12:48:30 2012 UTC (6 years, 11 months ago) by boklm
pam: remove "dynamic lookup" warnings

Revision 2935 - Directory Listing
Modified Tue Dec 11 18:56:35 2012 UTC (6 years, 11 months ago) by boklm
Make pam::multiple_ldap_access a class instead of a define

pam::multiple_ldap_access can only be included once. If it is included
multiple time, the value of the variable $access_classes used in
templates/system-auth is random. As it can only be included once, it
should be a parameterized class and not a defined resource.

Revision 2597 - Directory Listing
Modified Sat Mar 17 21:18:53 2012 UTC (7 years, 8 months ago) by misc
split pam module into 3 files

Revision 2413 - Directory Listing
Modified Wed Feb 15 09:54:37 2012 UTC (7 years, 9 months ago) by misc
manage /etc/openldap/ldap.conf by puppet

Revision 2412 - Directory Listing
Modified Wed Feb 15 09:54:34 2012 UTC (7 years, 9 months ago) by misc
clean nscd service

Revision 2228 - Directory Listing
Modified Sun Jan 8 22:40:52 2012 UTC (7 years, 11 months ago) by misc
cleanup and refactoring of pam module

Revision 1638 - Directory Listing
Modified Tue May 24 12:36:36 2011 UTC (8 years, 6 months ago) by misc
we do not use mdns on servers, so remove it as it seems to cause trouble
on mandriva 2010.0, as used on gandi vm


Revision 791 - Directory Listing
Modified Thu Jan 13 20:33:52 2011 UTC (8 years, 10 months ago) by misc
fix wrong class name

Revision 785 - Directory Listing
Modified Thu Jan 13 19:41:24 2011 UTC (8 years, 10 months ago) by misc
- allow to set access without forcing the restricted shell ( should
be done by openssh in fact, but that's easier to do like this for now )

Revision 780 - Directory Listing
Modified Thu Jan 13 18:12:32 2011 UTC (8 years, 10 months ago) by misc
move the type of access_class to deployment ( as this is tied to our group name )

Revision 779 - Directory Listing
Modified Thu Jan 13 18:12:31 2011 UTC (8 years, 10 months ago) by misc
allow to use multiple group for the access with pam

Revision 451 - Directory Listing
Modified Wed Nov 24 02:50:45 2010 UTC (9 years ago) by misc
restrict login to people of the group mga-commiters ( previous try was
not working with ssh key )

Revision 450 - Directory Listing
Modified Wed Nov 24 02:08:32 2010 UTC (9 years ago) by misc
s/commiters/committers/, to be in sync with the ldap group name and the dictionnary


Revision 449 - Directory Listing
Modified Wed Nov 24 01:39:17 2010 UTC (9 years ago) by misc
move the group restriction at the top of the file, or they are useless


Revision 448 - Directory Listing
Modified Wed Nov 24 01:27:30 2010 UTC (9 years ago) by misc
pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module


Revision 447 - Directory Listing
Modified Wed Nov 24 01:21:09 2010 UTC (9 years ago) by misc
remove empty line from the result file ( <% vs <%- )


Revision 411 - Directory Listing
Modified Tue Nov 23 01:11:15 2010 UTC (9 years ago) by misc
- add a comment so I do not have the impression to have
 lost 4h on debugging pam_ldap and openssh

Revision 410 - Directory Listing
Modified Tue Nov 23 01:11:14 2010 UTC (9 years ago) by misc
class was renamed 3 commits ago

Revision 406 - Directory Listing
Modified Tue Nov 23 01:11:07 2010 UTC (9 years ago) by misc
- rewrite restricted_shell, and split the shell in its own subclass

Revision 400 - Directory Listing
Modified Mon Nov 22 14:20:10 2010 UTC (9 years ago) by buchan
Add timelimits for nss_ldap, enable password policy


Revision 391 - Directory Listing
Modified Mon Nov 22 13:15:24 2010 UTC (9 years ago) by misc
- set the ldap password in /etc/ldap.secret

Revision 390 - Directory Listing
Modified Mon Nov 22 13:15:23 2010 UTC (9 years ago) by misc
- make sure nscd is installed and running

Revision 389 - Directory Listing
Modified Mon Nov 22 13:15:22 2010 UTC (9 years ago) by misc
- use the rootbinddn as preconized by buchan ( and let all access goes
  through nscd )

Revision 388 - Directory Listing
Modified Mon Nov 22 13:15:21 2010 UTC (9 years ago) by misc
- use the first pass if proposed ( or pam ask the password 2 times )

Revision 378 - Directory Listing
Modified Mon Nov 22 02:04:06 2010 UTC (9 years ago) by misc
- add default password of x, so manifests do not fail on test vms

Revision 377 - Directory Listing
Modified Mon Nov 22 02:04:04 2010 UTC (9 years ago) by misc
- add nssldap password handling

Revision 374 - Directory Listing
Modified Mon Nov 22 02:03:58 2010 UTC (9 years ago) by misc
- ldaps is required ( ie no unencrypted connection )

Revision 364 - Directory Listing
Modified Mon Nov 22 00:05:08 2010 UTC (9 years ago) by misc
- remove erronous line ( and uneeded ), as this cause error when applying about "ressource already declared"

Revision 363 - Directory Listing
Modified Mon Nov 22 00:05:06 2010 UTC (9 years ago) by misc
- pam_mkhomedir is in pam, not in a separate rpm

Revision 340 - Directory Listing
Modified Sat Nov 20 11:52:54 2010 UTC (9 years ago) by misc
- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others


Revision 269 - Directory Listing
Modified Wed Nov 17 16:25:42 2010 UTC (9 years ago) by misc
- fix templates ( again )
- add ldap.conf  


Revision 267 - Directory Listing
Modified Wed Nov 17 15:50:32 2010 UTC (9 years ago) by misc
- fix templates
- add nsswitch.conf


Revision 266 - Directory Listing
Modified Wed Nov 17 15:45:22 2010 UTC (9 years ago) by misc
- better use heritance


Revision 265 - Directory Listing
Added Wed Nov 17 15:35:10 2010 UTC (9 years ago) by misc
- add a proto module for taking care of pam ( need pam_ldap, etc support, and a review of the pam config file too )

  ViewVC Help
Powered by ViewVC 1.1.26