Log of /puppet/modules/openldap

---

Revision 605 - Directory Listing
Modified Tue Dec 14 18:29:41 2010 UTC (12 years, 3 months ago) by misc

let users see who is in another group ( needed for sympa )

---

Revision 575 - Directory Listing
Modified Fri Dec 10 20:17:41 2010 UTC (12 years, 3 months ago) by misc

allow users to read memberof, and use overlay to keep the changes in sync

---

Revision 486 - Directory Listing
Modified Tue Nov 30 19:21:46 2010 UTC (12 years, 4 months ago) by misc

since the domain name is not added automatically by openssl module, add
it here

---

Revision 420 - Directory Listing
Modified Tue Nov 23 13:29:44 2010 UTC (12 years, 4 months ago) by buchan

Allow users to write their own sshPublicKey, and all users to read it

---

Revision 392 - Directory Listing
Modified Mon Nov 22 13:20:26 2010 UTC (12 years, 4 months ago) by buchan

Fix host access to posixAccount attrs

---

Revision 376 - Directory Listing
Modified Mon Nov 22 02:04:03 2010 UTC (12 years, 4 months ago) by misc

- add proper access to nss_ldap user so pam_ldap auth can work

---

Revision 375 - Directory Listing
Modified Mon Nov 22 02:04:02 2010 UTC (12 years, 4 months ago) by misc

- do not hardcode mageia.org in acl

---

Revision 347 - Directory Listing
Modified Sun Nov 21 17:22:33 2010 UTC (12 years, 4 months ago) by misc

- use new class for openssl certs

---

Revision 344 - Directory Listing
Modified Sun Nov 21 16:45:39 2010 UTC (12 years, 4 months ago) by misc

- create a self signed certificate if not present ( for test vm )

---

Revision 340 - Directory Listing
Modified Sat Nov 20 11:52:54 2010 UTC (12 years, 4 months ago) by misc

- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others

---

Revision 212 - Directory Listing
Modified Tue Nov 9 14:25:10 2010 UTC (12 years, 4 months ago) by buchan

Close more anon access, and open up read access to some inetOrgPerson attrs to users

---

Revision 211 - Directory Listing
Modified Tue Nov 9 02:21:57 2010 UTC (12 years, 4 months ago) by misc

- replace hardcoded domain by a variable, to ease reuse of the module 

---

Revision 144 - Directory Listing
Modified Fri Nov 5 14:27:41 2010 UTC (12 years, 4 months ago) by buchan

Allow a bit more access to groups

---

Revision 142 - Directory Listing
Modified Fri Nov 5 13:03:26 2010 UTC (12 years, 4 months ago) by buchan

Try and allow users to identify the groups another user is in

---

Revision 141 - Directory Listing
Modified Fri Nov 5 12:41:38 2010 UTC (12 years, 4 months ago) by buchan

Give registrar group read access to some attributes again, and reduce users access
 added in previous commit

---

Revision 140 - Directory Listing
Modified Fri Nov 5 12:38:44 2010 UTC (12 years, 4 months ago) by buchan

Open read access for users to contact-type details for now

---

Revision 137 - Directory Listing
Modified Fri Nov 5 12:30:14 2010 UTC (12 years, 4 months ago) by buchan

Catdap needs some search access as well
Also allow catdap to write preferredLanguage

---

Revision 134 - Directory Listing
Modified Fri Nov 5 12:19:23 2010 UTC (12 years, 4 months ago) by buchan

Finalise registration ACLs
Restrict anonymous access (to none)
Add some additional ACLs to put back some access that previously relied on anonymous
Listen on all IP addresses, and ldapi
Assign localSSF matching ssf requirement, so we allow ldapi,ldaps,ldap+start_tls

---

Revision 82 - Directory Listing
Modified Thu Nov 4 12:06:15 2010 UTC (12 years, 4 months ago) by buchan

ACLs:
  Add ACLs required for self-registration application to registrar system group
  Allow Account admins to unlock accounts (write to pwdAccountLockedTime)
  Allow users to update their email address and preferredLanguage
Schema:
  Switch to rfc2307bis (replacing nis.schema and autofs.schema)
  Add LPK

---

Revision 63 - Directory Listing
Modified Fri Oct 29 01:05:58 2010 UTC (12 years, 5 months ago) by misc

- add ldap config file, with ldap restricted to localhost (until we set a firewall or stricter acl)

---

Revision 62 - Directory Listing
Modified Fri Oct 29 00:40:37 2010 UTC (12 years, 5 months ago) by misc

- fix the config file so it work on x86_64 and x86

---

Revision 54 - Directory Listing
Modified Thu Oct 28 23:27:31 2010 UTC (12 years, 5 months ago) by misc

-fix templates naming

---

Revision 53 - Directory Listing
Added Thu Oct 28 22:55:56 2010 UTC (12 years, 5 months ago) by misc

- deploy ldap with puppet on valstar