Log of /puppet/modules/openldap/templates/mandriva-dit-access.conf

---

Revision 212 - (view) (download) (annotate) - [select for diffs]
Modified Tue Nov 9 14:25:10 2010 UTC (12 years, 10 months ago) by buchan
File length: 6861 byte(s)
Diff to previous 144

Close more anon access, and open up read access to some inetOrgPerson attrs to users

---

Revision 144 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 14:27:41 2010 UTC (12 years, 10 months ago) by buchan
File length: 6669 byte(s)
Diff to previous 142

Allow a bit more access to groups

---

Revision 142 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 13:03:26 2010 UTC (12 years, 10 months ago) by buchan
File length: 6647 byte(s)
Diff to previous 141

Try and allow users to identify the groups another user is in

---

Revision 141 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:41:38 2010 UTC (12 years, 10 months ago) by buchan
File length: 6533 byte(s)
Diff to previous 140

Give registrar group read access to some attributes again, and reduce users access
 added in previous commit

---

Revision 140 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:38:44 2010 UTC (12 years, 10 months ago) by buchan
File length: 6533 byte(s)
Diff to previous 137

Open read access for users to contact-type details for now

---

Revision 137 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:30:14 2010 UTC (12 years, 10 months ago) by buchan
File length: 6533 byte(s)
Diff to previous 134

Catdap needs some search access as well
Also allow catdap to write preferredLanguage

---

Revision 134 - (view) (download) (annotate) - [select for diffs]
Modified Fri Nov 5 12:19:23 2010 UTC (12 years, 10 months ago) by buchan
File length: 6510 byte(s)
Diff to previous 82

Finalise registration ACLs
Restrict anonymous access (to none)
Add some additional ACLs to put back some access that previously relied on anonymous
Listen on all IP addresses, and ldapi
Assign localSSF matching ssf requirement, so we allow ldapi,ldaps,ldap+start_tls

---

Revision 82 - (view) (download) (annotate) - [select for diffs]
Modified Thu Nov 4 12:06:15 2010 UTC (12 years, 10 months ago) by buchan
File length: 6477 byte(s)
Diff to previous 53

ACLs:
  Add ACLs required for self-registration application to registrar system group
  Allow Account admins to unlock accounts (write to pwdAccountLockedTime)
  Allow users to update their email address and preferredLanguage
Schema:
  Switch to rfc2307bis (replacing nis.schema and autofs.schema)
  Add LPK

---

Revision 53 - (view) (download) (annotate) - [select for diffs]
Added Thu Oct 28 22:55:56 2010 UTC (12 years, 11 months ago) by misc
File length: 5616 byte(s)

- deploy ldap with puppet on valstar