Log of /puppet/modules/openldap/templates/mandriva-dit-access.conf

---

Revision 420 - (view) (download) (annotate) - [select for diffs]
Modified Tue Nov 23 13:29:44 2010 UTC (13 years, 4 months ago) by buchan
File length: 7139 byte(s)
Diff to previous 392 , to selected 134

Allow users to write their own sshPublicKey, and all users to read it

---

Revision 392 - (view) (download) (annotate) - [select for diffs]
Modified Mon Nov 22 13:20:26 2010 UTC (13 years, 4 months ago) by buchan
File length: 7126 byte(s)
Diff to previous 376 , to selected 134

Fix host access to posixAccount attrs

---

Revision 376 - (view) (download) (annotate) - [select for diffs]
Modified Mon Nov 22 02:04:03 2010 UTC (13 years, 4 months ago) by misc
File length: 7150 byte(s)
Diff to previous 375 , to selected 134

- add proper access to nss_ldap user so pam_ldap auth can work

---

Revision 375 - (view) (download) (annotate) - [select for diffs]
Modified Mon Nov 22 02:04:02 2010 UTC (13 years, 4 months ago) by misc
File length: 6861 byte(s)
Diff to previous 212 , to selected 134

- do not hardcode mageia.org in acl

---

Revision 212 - (view) (download) (annotate) - [select for diffs]
Modified Tue Nov 9 14:25:10 2010 UTC (13 years, 5 months ago) by buchan
File length: 6861 byte(s)
Diff to previous 144 , to selected 134

Close more anon access, and open up read access to some inetOrgPerson attrs to users

---

Revision 144 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 14:27:41 2010 UTC (13 years, 5 months ago) by buchan
File length: 6669 byte(s)
Diff to previous 142 , to selected 134

Allow a bit more access to groups

---

Revision 142 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 13:03:26 2010 UTC (13 years, 5 months ago) by buchan
File length: 6647 byte(s)
Diff to previous 141 , to selected 134

Try and allow users to identify the groups another user is in

---

Revision 141 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:41:38 2010 UTC (13 years, 5 months ago) by buchan
File length: 6533 byte(s)
Diff to previous 140 , to selected 134

Give registrar group read access to some attributes again, and reduce users access
 added in previous commit

---

Revision 140 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:38:44 2010 UTC (13 years, 5 months ago) by buchan
File length: 6533 byte(s)
Diff to previous 137 , to selected 134

Open read access for users to contact-type details for now

---

Revision 137 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:30:14 2010 UTC (13 years, 5 months ago) by buchan
File length: 6533 byte(s)
Diff to previous 134

Catdap needs some search access as well
Also allow catdap to write preferredLanguage

---

Revision 134 - (view) (download) (annotate) - [selected]
Modified Fri Nov 5 12:19:23 2010 UTC (13 years, 5 months ago) by buchan
File length: 6510 byte(s)
Diff to previous 82

Finalise registration ACLs
Restrict anonymous access (to none)
Add some additional ACLs to put back some access that previously relied on anonymous
Listen on all IP addresses, and ldapi
Assign localSSF matching ssf requirement, so we allow ldapi,ldaps,ldap+start_tls

---

Revision 82 - (view) (download) (annotate) - [select for diffs]
Modified Thu Nov 4 12:06:15 2010 UTC (13 years, 5 months ago) by buchan
File length: 6477 byte(s)
Diff to previous 53 , to selected 134

ACLs:
  Add ACLs required for self-registration application to registrar system group
  Allow Account admins to unlock accounts (write to pwdAccountLockedTime)
  Allow users to update their email address and preferredLanguage
Schema:
  Switch to rfc2307bis (replacing nis.schema and autofs.schema)
  Add LPK

---

Revision 53 - (view) (download) (annotate) - [select for diffs]
Added Thu Oct 28 22:55:56 2010 UTC (13 years, 5 months ago) by misc
File length: 5616 byte(s)
Diff to selected 134

- deploy ldap with puppet on valstar