Log of /puppet/modules/openldap

---

Revision 212 - Directory Listing
Modified Tue Nov 9 14:25:10 2010 UTC (13 years, 11 months ago) by buchan

Close more anon access, and open up read access to some inetOrgPerson attrs to users

---

Revision 211 - Directory Listing
Modified Tue Nov 9 02:21:57 2010 UTC (13 years, 11 months ago) by misc

- replace hardcoded domain by a variable, to ease reuse of the module 

---

Revision 144 - Directory Listing
Modified Fri Nov 5 14:27:41 2010 UTC (13 years, 11 months ago) by buchan

Allow a bit more access to groups

---

Revision 142 - Directory Listing
Modified Fri Nov 5 13:03:26 2010 UTC (13 years, 11 months ago) by buchan

Try and allow users to identify the groups another user is in

---

Revision 141 - Directory Listing
Modified Fri Nov 5 12:41:38 2010 UTC (13 years, 11 months ago) by buchan

Give registrar group read access to some attributes again, and reduce users access
 added in previous commit

---

Revision 140 - Directory Listing
Modified Fri Nov 5 12:38:44 2010 UTC (13 years, 11 months ago) by buchan

Open read access for users to contact-type details for now

---

Revision 137 - Directory Listing
Modified Fri Nov 5 12:30:14 2010 UTC (13 years, 11 months ago) by buchan

Catdap needs some search access as well
Also allow catdap to write preferredLanguage

---

Revision 134 - Directory Listing
Modified Fri Nov 5 12:19:23 2010 UTC (13 years, 11 months ago) by buchan

Finalise registration ACLs
Restrict anonymous access (to none)
Add some additional ACLs to put back some access that previously relied on anonymous
Listen on all IP addresses, and ldapi
Assign localSSF matching ssf requirement, so we allow ldapi,ldaps,ldap+start_tls

---

Revision 82 - Directory Listing
Modified Thu Nov 4 12:06:15 2010 UTC (13 years, 11 months ago) by buchan

ACLs:
  Add ACLs required for self-registration application to registrar system group
  Allow Account admins to unlock accounts (write to pwdAccountLockedTime)
  Allow users to update their email address and preferredLanguage
Schema:
  Switch to rfc2307bis (replacing nis.schema and autofs.schema)
  Add LPK

---

Revision 63 - Directory Listing
Modified Fri Oct 29 01:05:58 2010 UTC (13 years, 11 months ago) by misc

- add ldap config file, with ldap restricted to localhost (until we set a firewall or stricter acl)

---

Revision 62 - Directory Listing
Modified Fri Oct 29 00:40:37 2010 UTC (13 years, 11 months ago) by misc

- fix the config file so it work on x86_64 and x86

---

Revision 54 - Directory Listing
Modified Thu Oct 28 23:27:31 2010 UTC (13 years, 11 months ago) by misc

-fix templates naming

---

Revision 53 - Directory Listing
Added Thu Oct 28 22:55:56 2010 UTC (13 years, 11 months ago) by misc

- deploy ldap with puppet on valstar