Log of /puppet/modules/pam/templates

---

Revision 2413 - Directory Listing
Modified Wed Feb 15 09:54:37 2012 UTC (11 years, 3 months ago) by misc

manage /etc/openldap/ldap.conf by puppet

---

Revision 1638 - Directory Listing
Modified Tue May 24 12:36:36 2011 UTC (12 years ago) by misc

we do not use mdns on servers, so remove it as it seems to cause trouble
on mandriva 2010.0, as used on gandi vm

---

Revision 785 - Directory Listing
Modified Thu Jan 13 19:41:24 2011 UTC (12 years, 4 months ago) by misc

- allow to set access without forcing the restricted shell ( should
be done by openssh in fact, but that's easier to do like this for now )

---

Revision 779 - Directory Listing
Modified Thu Jan 13 18:12:31 2011 UTC (12 years, 4 months ago) by misc

allow to use multiple group for the access with pam

---

Revision 451 - Directory Listing
Modified Wed Nov 24 02:50:45 2010 UTC (12 years, 6 months ago) by misc

restrict login to people of the group mga-commiters ( previous try was
not working with ssh key )

---

Revision 450 - Directory Listing
Modified Wed Nov 24 02:08:32 2010 UTC (12 years, 6 months ago) by misc

s/commiters/committers/, to be in sync with the ldap group name and the dictionnary

---

Revision 449 - Directory Listing
Modified Wed Nov 24 01:39:17 2010 UTC (12 years, 6 months ago) by misc

move the group restriction at the top of the file, or they are useless

---

Revision 448 - Directory Listing
Modified Wed Nov 24 01:27:30 2010 UTC (12 years, 6 months ago) by misc

pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module

---

Revision 447 - Directory Listing
Modified Wed Nov 24 01:21:09 2010 UTC (12 years, 6 months ago) by misc

remove empty line from the result file ( <% vs <%- )

---

Revision 400 - Directory Listing
Modified Mon Nov 22 14:20:10 2010 UTC (12 years, 6 months ago) by buchan

Add timelimits for nss_ldap, enable password policy

---

Revision 389 - Directory Listing
Modified Mon Nov 22 13:15:22 2010 UTC (12 years, 6 months ago) by misc

- use the rootbinddn as preconized by buchan ( and let all access goes
  through nscd )

---

Revision 388 - Directory Listing
Modified Mon Nov 22 13:15:21 2010 UTC (12 years, 6 months ago) by misc

- use the first pass if proposed ( or pam ask the password 2 times )

---

Revision 377 - Directory Listing
Modified Mon Nov 22 02:04:04 2010 UTC (12 years, 6 months ago) by misc

- add nssldap password handling

---

Revision 374 - Directory Listing
Modified Mon Nov 22 02:03:58 2010 UTC (12 years, 6 months ago) by misc

- ldaps is required ( ie no unencrypted connection )

---

Revision 340 - Directory Listing
Modified Sat Nov 20 11:52:54 2010 UTC (12 years, 6 months ago) by misc

- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others

---

Revision 269 - Directory Listing
Modified Wed Nov 17 16:25:42 2010 UTC (12 years, 6 months ago) by misc

- fix templates ( again )
- add ldap.conf  

---

Revision 267 - Directory Listing
Modified Wed Nov 17 15:50:32 2010 UTC (12 years, 6 months ago) by misc

- fix templates
- add nsswitch.conf

---

Revision 265 - Directory Listing
Added Wed Nov 17 15:35:10 2010 UTC (12 years, 6 months ago) by misc

- add a proto module for taking care of pam ( need pam_ldap, etc support, and a review of the pam config file too )