Log of /puppet/modules/pam

---

Revision 2597 - Directory Listing
Modified Sat Mar 17 21:18:53 2012 UTC (11 years ago) by misc

split pam module into 3 files

---

Revision 2413 - Directory Listing
Modified Wed Feb 15 09:54:37 2012 UTC (11 years, 1 month ago) by misc

manage /etc/openldap/ldap.conf by puppet

---

Revision 2412 - Directory Listing
Modified Wed Feb 15 09:54:34 2012 UTC (11 years, 1 month ago) by misc

clean nscd service

---

Revision 2228 - Directory Listing
Modified Sun Jan 8 22:40:52 2012 UTC (11 years, 2 months ago) by misc

cleanup and refactoring of pam module

---

Revision 1638 - Directory Listing
Modified Tue May 24 12:36:36 2011 UTC (11 years, 10 months ago) by misc

we do not use mdns on servers, so remove it as it seems to cause trouble
on mandriva 2010.0, as used on gandi vm

---

Revision 791 - Directory Listing
Modified Thu Jan 13 20:33:52 2011 UTC (12 years, 2 months ago) by misc

fix wrong class name

---

Revision 785 - Directory Listing
Modified Thu Jan 13 19:41:24 2011 UTC (12 years, 2 months ago) by misc

- allow to set access without forcing the restricted shell ( should
be done by openssh in fact, but that's easier to do like this for now )

---

Revision 780 - Directory Listing
Modified Thu Jan 13 18:12:32 2011 UTC (12 years, 2 months ago) by misc

move the type of access_class to deployment ( as this is tied to our group name )

---

Revision 779 - Directory Listing
Modified Thu Jan 13 18:12:31 2011 UTC (12 years, 2 months ago) by misc

allow to use multiple group for the access with pam

---

Revision 451 - Directory Listing
Modified Wed Nov 24 02:50:45 2010 UTC (12 years, 4 months ago) by misc

restrict login to people of the group mga-commiters ( previous try was
not working with ssh key )

---

Revision 450 - Directory Listing
Modified Wed Nov 24 02:08:32 2010 UTC (12 years, 4 months ago) by misc

s/commiters/committers/, to be in sync with the ldap group name and the dictionnary

---

Revision 449 - Directory Listing
Modified Wed Nov 24 01:39:17 2010 UTC (12 years, 4 months ago) by misc

move the group restriction at the top of the file, or they are useless

---

Revision 448 - Directory Listing
Modified Wed Nov 24 01:27:30 2010 UTC (12 years, 4 months ago) by misc

pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module

---

Revision 447 - Directory Listing
Modified Wed Nov 24 01:21:09 2010 UTC (12 years, 4 months ago) by misc

remove empty line from the result file ( <% vs <%- )

---

Revision 411 - Directory Listing
Modified Tue Nov 23 01:11:15 2010 UTC (12 years, 4 months ago) by misc

- add a comment so I do not have the impression to have
 lost 4h on debugging pam_ldap and openssh

---

Revision 410 - Directory Listing
Modified Tue Nov 23 01:11:14 2010 UTC (12 years, 4 months ago) by misc

class was renamed 3 commits ago

---

Revision 406 - Directory Listing
Modified Tue Nov 23 01:11:07 2010 UTC (12 years, 4 months ago) by misc

- rewrite restricted_shell, and split the shell in its own subclass

---

Revision 400 - Directory Listing
Modified Mon Nov 22 14:20:10 2010 UTC (12 years, 4 months ago) by buchan

Add timelimits for nss_ldap, enable password policy

---

Revision 391 - Directory Listing
Modified Mon Nov 22 13:15:24 2010 UTC (12 years, 4 months ago) by misc

- set the ldap password in /etc/ldap.secret

---

Revision 390 - Directory Listing
Modified Mon Nov 22 13:15:23 2010 UTC (12 years, 4 months ago) by misc

- make sure nscd is installed and running

---

Revision 389 - Directory Listing
Modified Mon Nov 22 13:15:22 2010 UTC (12 years, 4 months ago) by misc

- use the rootbinddn as preconized by buchan ( and let all access goes
  through nscd )

---

Revision 388 - Directory Listing
Modified Mon Nov 22 13:15:21 2010 UTC (12 years, 4 months ago) by misc

- use the first pass if proposed ( or pam ask the password 2 times )

---

Revision 378 - Directory Listing
Modified Mon Nov 22 02:04:06 2010 UTC (12 years, 4 months ago) by misc

- add default password of x, so manifests do not fail on test vms

---

Revision 377 - Directory Listing
Modified Mon Nov 22 02:04:04 2010 UTC (12 years, 4 months ago) by misc

- add nssldap password handling

---

Revision 374 - Directory Listing
Modified Mon Nov 22 02:03:58 2010 UTC (12 years, 4 months ago) by misc

- ldaps is required ( ie no unencrypted connection )

---

Revision 364 - Directory Listing
Modified Mon Nov 22 00:05:08 2010 UTC (12 years, 4 months ago) by misc

- remove erronous line ( and uneeded ), as this cause error when applying about "ressource already declared"

---

Revision 363 - Directory Listing
Modified Mon Nov 22 00:05:06 2010 UTC (12 years, 4 months ago) by misc

- pam_mkhomedir is in pam, not in a separate rpm

---

Revision 340 - Directory Listing
Modified Sat Nov 20 11:52:54 2010 UTC (12 years, 4 months ago) by misc

- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others

---

Revision 269 - Directory Listing
Modified Wed Nov 17 16:25:42 2010 UTC (12 years, 4 months ago) by misc

- fix templates ( again )
- add ldap.conf  

---

Revision 267 - Directory Listing
Modified Wed Nov 17 15:50:32 2010 UTC (12 years, 4 months ago) by misc

- fix templates
- add nsswitch.conf

---

Revision 266 - Directory Listing
Modified Wed Nov 17 15:45:22 2010 UTC (12 years, 4 months ago) by misc

- better use heritance

---

Revision 265 - Directory Listing
Added Wed Nov 17 15:35:10 2010 UTC (12 years, 4 months ago) by misc

- add a proto module for taking care of pam ( need pam_ldap, etc support, and a review of the pam config file too )