Log of /puppet/modules/pam

---

Revision 451 - Directory Listing
Modified Wed Nov 24 02:50:45 2010 UTC (12 years, 4 months ago) by misc

restrict login to people of the group mga-commiters ( previous try was
not working with ssh key )

---

Revision 450 - Directory Listing
Modified Wed Nov 24 02:08:32 2010 UTC (12 years, 4 months ago) by misc

s/commiters/committers/, to be in sync with the ldap group name and the dictionnary

---

Revision 449 - Directory Listing
Modified Wed Nov 24 01:39:17 2010 UTC (12 years, 4 months ago) by misc

move the group restriction at the top of the file, or they are useless

---

Revision 448 - Directory Listing
Modified Wed Nov 24 01:27:30 2010 UTC (12 years, 4 months ago) by misc

pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module

---

Revision 447 - Directory Listing
Modified Wed Nov 24 01:21:09 2010 UTC (12 years, 4 months ago) by misc

remove empty line from the result file ( <% vs <%- )

---

Revision 411 - Directory Listing
Modified Tue Nov 23 01:11:15 2010 UTC (12 years, 4 months ago) by misc

- add a comment so I do not have the impression to have
 lost 4h on debugging pam_ldap and openssh

---

Revision 410 - Directory Listing
Modified Tue Nov 23 01:11:14 2010 UTC (12 years, 4 months ago) by misc

class was renamed 3 commits ago

---

Revision 406 - Directory Listing
Modified Tue Nov 23 01:11:07 2010 UTC (12 years, 4 months ago) by misc

- rewrite restricted_shell, and split the shell in its own subclass

---

Revision 400 - Directory Listing
Modified Mon Nov 22 14:20:10 2010 UTC (12 years, 4 months ago) by buchan

Add timelimits for nss_ldap, enable password policy

---

Revision 391 - Directory Listing
Modified Mon Nov 22 13:15:24 2010 UTC (12 years, 4 months ago) by misc

- set the ldap password in /etc/ldap.secret

---

Revision 390 - Directory Listing
Modified Mon Nov 22 13:15:23 2010 UTC (12 years, 4 months ago) by misc

- make sure nscd is installed and running

---

Revision 389 - Directory Listing
Modified Mon Nov 22 13:15:22 2010 UTC (12 years, 4 months ago) by misc

- use the rootbinddn as preconized by buchan ( and let all access goes
  through nscd )

---

Revision 388 - Directory Listing
Modified Mon Nov 22 13:15:21 2010 UTC (12 years, 4 months ago) by misc

- use the first pass if proposed ( or pam ask the password 2 times )

---

Revision 378 - Directory Listing
Modified Mon Nov 22 02:04:06 2010 UTC (12 years, 4 months ago) by misc

- add default password of x, so manifests do not fail on test vms

---

Revision 377 - Directory Listing
Modified Mon Nov 22 02:04:04 2010 UTC (12 years, 4 months ago) by misc

- add nssldap password handling

---

Revision 374 - Directory Listing
Modified Mon Nov 22 02:03:58 2010 UTC (12 years, 4 months ago) by misc

- ldaps is required ( ie no unencrypted connection )

---

Revision 364 - Directory Listing
Modified Mon Nov 22 00:05:08 2010 UTC (12 years, 4 months ago) by misc

- remove erronous line ( and uneeded ), as this cause error when applying about "ressource already declared"

---

Revision 363 - Directory Listing
Modified Mon Nov 22 00:05:06 2010 UTC (12 years, 4 months ago) by misc

- pam_mkhomedir is in pam, not in a separate rpm

---

Revision 340 - Directory Listing
Modified Sat Nov 20 11:52:54 2010 UTC (12 years, 4 months ago) by misc

- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others

---

Revision 269 - Directory Listing
Modified Wed Nov 17 16:25:42 2010 UTC (12 years, 4 months ago) by misc

- fix templates ( again )
- add ldap.conf  

---

Revision 267 - Directory Listing
Modified Wed Nov 17 15:50:32 2010 UTC (12 years, 4 months ago) by misc

- fix templates
- add nsswitch.conf

---

Revision 266 - Directory Listing
Modified Wed Nov 17 15:45:22 2010 UTC (12 years, 4 months ago) by misc

- better use heritance

---

Revision 265 - Directory Listing
Added Wed Nov 17 15:35:10 2010 UTC (12 years, 4 months ago) by misc

- add a proto module for taking care of pam ( need pam_ldap, etc support, and a review of the pam config file too )