/[adm]/puppet/modules/openldap
ViewVC logotype

Log of /puppet/modules/openldap

View Directory Listing Directory Listing


Sticky Revision:

Revision 420 - Directory Listing
Modified Tue Nov 23 13:29:44 2010 UTC (13 years, 4 months ago) by buchan
Allow users to write their own sshPublicKey, and all users to read it


Revision 392 - Directory Listing
Modified Mon Nov 22 13:20:26 2010 UTC (13 years, 4 months ago) by buchan
Fix host access to posixAccount attrs


Revision 376 - Directory Listing
Modified Mon Nov 22 02:04:03 2010 UTC (13 years, 4 months ago) by misc
- add proper access to nss_ldap user so pam_ldap auth can work

Revision 375 - Directory Listing
Modified Mon Nov 22 02:04:02 2010 UTC (13 years, 4 months ago) by misc
- do not hardcode mageia.org in acl

Revision 347 - Directory Listing
Modified Sun Nov 21 17:22:33 2010 UTC (13 years, 4 months ago) by misc
- use new class for openssl certs

Revision 344 - Directory Listing
Modified Sun Nov 21 16:45:39 2010 UTC (13 years, 4 months ago) by misc
- create a self signed certificate if not present ( for test vm )

Revision 340 - Directory Listing
Modified Sat Nov 20 11:52:54 2010 UTC (13 years, 4 months ago) by misc
- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others


Revision 212 - Directory Listing
Modified Tue Nov 9 14:25:10 2010 UTC (13 years, 4 months ago) by buchan
Close more anon access, and open up read access to some inetOrgPerson attrs to users


Revision 211 - Directory Listing
Modified Tue Nov 9 02:21:57 2010 UTC (13 years, 4 months ago) by misc
- replace hardcoded domain by a variable, to ease reuse of the module 


Revision 144 - Directory Listing
Modified Fri Nov 5 14:27:41 2010 UTC (13 years, 4 months ago) by buchan
Allow a bit more access to groups


Revision 142 - Directory Listing
Modified Fri Nov 5 13:03:26 2010 UTC (13 years, 4 months ago) by buchan
Try and allow users to identify the groups another user is in


Revision 141 - Directory Listing
Modified Fri Nov 5 12:41:38 2010 UTC (13 years, 4 months ago) by buchan
Give registrar group read access to some attributes again, and reduce users access
 added in previous commit


Revision 140 - Directory Listing
Modified Fri Nov 5 12:38:44 2010 UTC (13 years, 4 months ago) by buchan
Open read access for users to contact-type details for now


Revision 137 - Directory Listing
Modified Fri Nov 5 12:30:14 2010 UTC (13 years, 4 months ago) by buchan
Catdap needs some search access as well
Also allow catdap to write preferredLanguage


Revision 134 - Directory Listing
Modified Fri Nov 5 12:19:23 2010 UTC (13 years, 4 months ago) by buchan
Finalise registration ACLs
Restrict anonymous access (to none)
Add some additional ACLs to put back some access that previously relied on anonymous
Listen on all IP addresses, and ldapi
Assign localSSF matching ssf requirement, so we allow ldapi,ldaps,ldap+start_tls



Revision 82 - Directory Listing
Modified Thu Nov 4 12:06:15 2010 UTC (13 years, 4 months ago) by buchan
ACLs:
  Add ACLs required for self-registration application to registrar system group
  Allow Account admins to unlock accounts (write to pwdAccountLockedTime)
  Allow users to update their email address and preferredLanguage
Schema:
  Switch to rfc2307bis (replacing nis.schema and autofs.schema)
  Add LPK


Revision 63 - Directory Listing
Modified Fri Oct 29 01:05:58 2010 UTC (13 years, 5 months ago) by misc
- add ldap config file, with ldap restricted to localhost (until we set a firewall or stricter acl)


Revision 62 - Directory Listing
Modified Fri Oct 29 00:40:37 2010 UTC (13 years, 5 months ago) by misc
- fix the config file so it work on x86_64 and x86

Revision 54 - Directory Listing
Modified Thu Oct 28 23:27:31 2010 UTC (13 years, 5 months ago) by misc
-fix templates naming

Revision 53 - Directory Listing
Added Thu Oct 28 22:55:56 2010 UTC (13 years, 5 months ago) by misc
- deploy ldap with puppet on valstar


  ViewVC Help
Powered by ViewVC 1.1.30